It interacting with the Parallels kernel driver and executing specified file at the host side: The following function was implemented after the short reverse engineering of shell extension.
Parallels 13 user guide windows#
It's also interesting and useful, that this action can be triggered from Windows user account with any privileges (including Guest):Īnd because the target file will be opened at the host side with privileges of the current OS X user, it seems that "Access Windows folder from Mac" option is definitely breaks a security model that you're usually expecting from guest-host interaction.
It consists from several magic values and pointer to the ASCII string with the target file path at 0圆0 offset:Ġ:037> da "\\psf\TC\dev\_exploits\prl_guet_"Ġ0000000`02c787f0 "to_host\New Text Document.txt"Īfter sending this IOCTL control request to the driver, specified file will be opened at the host side.
0 kommentar(er)
