Home Explore Help
Register Sign In
super
/
PCLPoC
mirror of https://github.com/MiRinFork/PCLPoC
1
0
Fork 0
Files
Tree: d4ea0d78c6
Branches Tags
PCLPoC
/
analysis
/
2.99.0.1
/
vm-test
/
evidence
/
demo.log

demo.log 812 B
History Raw

123456789101112 
  1. [03:05:04] resolution=1920x1080 screen=1920x1020 console=918x1020 pcl=998
    2. 

  2. [03:05:05] mark step1 Windows 10 Enterprise LTSC 2021 - isolated lab VM. PCL 2.99.0.1 (build 415).
    3. 

  3. [03:05:11] mark step2 Copy PCL 2.99.0.1.zip to the Desktop.
    4. 

  4. [03:05:18] mark step3 Extract the new PCL to Desktop\PCL.
    5. 

  5. [03:05:26] mark step4 Run the PoC: forged notice server, hosts entry and a lab CA.
    6. 

  6. [03:06:01] mark method1 method 1: notice.json -> setup -> LaunchAdvanceRun
    7. 

  7. [03:06:01] mark blocked 2.99.0.1 blocks LaunchAdvanceRun
    8. 

  8. [03:06:13] mark step6 Delete the entire PCL directory.
    9. 

  9. [03:06:22] mark step7 Method 2: notice.cfg + slientupdate -> silent update -> arbitrary exe.
    10. 

  10. [03:06:39] mark success method 2: slientupdate -> arbitrary exe (success)
    11. 

  11. [03:06:56] mark end demo end
    12. 

  12. [03:06:57] screenshot final-desktop.png
    13.