[Trillium]

Greetings Guys,

I just developed a small Security Program which is named "CVE-2022-30190 [MSDT] aka Follina Vulnerability Checker & Fixer Tool".

The Tool will help you to check if your current Windows System is affected by the CVE-2022-30190 [MSDT] aka Follina Vulnerability and it also provide the possibility to close the CVE-2022-30190 [MSDT] aka Follina Vulnerability and also you can restore the specific Registry Entry from a before created Registry Entry Backup File.

If you should note any bugs or if you should have any questions or if you should need any help then please let me know anytime! 🤝


CVE-2022-30190 [MSDT] aka Follina Vulnerability Checker & Fixer Tool Picture:




CVE-2022-30190 [MSDT] aka Follina Vulnerability Checker & Fixer Tool Download URL:

https://www.sendspace.com/file/f0isjx

[jcole]

Is it safe to disable the MSDT URL protocol all together using this:
"Run Command Prompt as Administrator.

To back up the registry key, execute the command “reg export HKEY_CLASSES_ROOT\ms-msdt filename“
Execute the command “reg delete HKEY_CLASSES_ROOT\ms-msdt /f”."

source: https://msrc-blog.microsoft.com/2022/05/...erability/

[Trillium]

Is it safe to disable the MSDT URL protocol all together using this:
"Run Command Prompt as Administrator.

To back up the registry key, execute the command “reg export HKEY_CLASSES_ROOT\ms-msdt filename“
Execute the command “reg delete HKEY_CLASSES_ROOT\ms-msdt /f”."

source: https://msrc-blog.microsoft.com/2022/05/...erability/

Greetings jcole, thank you very much for your research and help I very appreciate it! In the other Thread I already provided a Batch Script which doing these things. I wanted also create a Program with a GUI because I think it's for some people more easier to use.

[jcole]

Greetings jcole, thank you very much for your research and help I very appreciate it! In the other Thread I already provided a Batch Script which doing these things. I wanted also create a Program with a GUI because I think it's for some people more easier to use.

I figured that's what you did.. You are very talented. Thanks for shining light on this because I had no idea about this exploit until I saw your program with an amazing GUI! Great work and thank for keeping the community safe. 👍

[Kr0n0s]

Kinda top and kinda kek, probably top kek.
didnt know this exploit existed as i've been basically sleeping security wise lately. thanks for shining light on this

[Zher0]

Greetings Guys,

I just developed a small Security Program which is named "CVE-2022-30190 [MSDT] aka Follina Vulnerability Checker & Fixer Tool".

The Tool will help you to check if your current Windows System is affected by the CVE-2022-30190 [MSDT] aka Follina Vulnerability and it also provide the possibility to close the CVE-2022-30190 [MSDT] aka Follina Vulnerability and also you can restore the specific Registry Entry from a before created Registry Entry Backup File.

If you should note any bugs or if you should have any questions or if you should need any help then please let me know anytime! 🤝[/color]


CVE-2022-30190 [MSDT] aka Follina Vulnerability Checker & Fixer Tool Picture:




CVE-2022-30190 [MSDT] aka Follina Vulnerability Checker & Fixer Tool Download URL:

https://www.sendspace.com/file/f0isjx

Nice share man! Mind if I add it to my article on the Follina exploit?

[Trillium]

I figured that's what you did.. You are very talented. Thanks for shining light on this because I had no idea about this exploit until I saw your program with an amazing GUI! Great work and thank for keeping the community safe. 👍

Greetings jcole, thank you so much for your nice and positive words I so much appreciate them! No problem its a pleasure for me todo that! 🤝

Kinda top and kinda kek, probably top kek.
didnt know this exploit existed as i've been basically sleeping security wise lately. thanks for shining light on this

Greetings Kr0n0s, thank you very much for your nice post! No problem, its good that you are now aware of this Vulnerability! 🤝

Nice share man! Mind if I add it to my article on the Follina exploit?

Greetings Zher0, thank you so much for your nice post I am happy to hear that you like the tool! Of course you can add it to your article!

[Nico]

The tool looks great. It does seem that M$ has officially remediated this yesterday in the June 2022 Patch Tuesday updates. Take note: Even with the update, msdt.exe is still vulnerable to being automatically spawned, but without injection.

I still have MSDT disabled for now since it’s basically a useless program regardless.