RSSAmplifier

Blog

Hexacorn

Hexacorn

hexacorn.comRSS feed ↗5 posts

Latest posts

little secret of msconfig.exe

This post doesn t include anything ground breaking, but is just yet another attempt to describe/document less-known command line arguments of many known, often native to the platform, Windows programs. When you launch msconfig.exe it shows a well-known configuration dialog box: Continue reading

1 little known secret of forfiles.exe, part 2

In this old post I have demonstrated how to abuse forfiles.exe to run your cmd.exe of choice. There is one more trick we can do with this tool. When forfiles.exe enumerates the files it executes a default command cmd /c Continue reading

Some unintelligent fun with ms-notepad protocol

In my previous post I have provided a list of new protocols I noticed in the latest Windows 11 build. One that immediately caught my attention was ms-notepad:// . You can use it to launch Notepad via ms-notepad:// filename> links and it Continue reading

A few more protocol handlers :), Part 2

In 2018 I published this post. In 2022 I published this post and this post. @Radkeyboard7984 and I continue chatting about the new Windows 11 protocols and I just did a quick comparison between the protocols I posted before, and Continue reading

WerReportCreate API

The API I want to talk about today is called WerReportCreate. It takes a few arguments, but the most interesting is the first one, which is the Event Name. Looking at Windows OS binaries, we can see this API being Continue reading