Earlier today I ran across this blog post on hijacking windows .lnk file so I decided to build out and test a full POC for it using Windows 8.1.
To reproduce this just copy these 7 lines into powershell and ctrl+c
now runs calc.exe
instead of copying your text:
https://gist.github.com/jgamblin/4aa897a2cca6912eeea96a12d73d8cd6
For extra jerkiness this will shutdown
a windows machine when ctrl+c
is pressed:
https://gist.github.com/jgamblin/9ca3be57c24d4b422e385d296763d903
Using this technique you could easily natively remap common commands like ctrl+c , ctrl+v, ctrl-alt-delete
to do anything the logged in user can do. You could also copy these links into the common desktop (C:\Users\Public\Desktop\
) to make anyone who logs into the machine have these mappings.
Here is a full video of the POC: