diff options
| author | Alex Henrie <alexhenrie24@gmail.com> | 2023-10-28 19:06:47 -0600 |
|---|---|---|
| committer | David Faure <faure@kde.org> | 2023-10-29 07:55:07 +0000 |
| commit | c461f247a61f497ff96cd22b84527346d154f5e3 (patch) | |
| tree | d579395bd3024a7d969e36e9bff9d2ee5f7e070d | |
| parent | ed943f18ed8ebdbc890732573e7c12b23d670c1f (diff) | |
Add text/vbscript.encode
This is the MIME type that Internet Explorer accepts for
pseudo-base64-encoded VBScript files, which typically have a .vbe
extension. Use of this file format is discouraged and files of this type
should be treated with suspicion.
https://book.hacktricks.xyz/windows-hardening/ntlm/places-to-steal-ntlm-creds#vbscript
| -rw-r--r-- | data/freedesktop.org.xml.in | 10 | ||||
| -rw-r--r-- | tests/mime-detection/helloworld.vbe | bin | 0 -> 49 bytes | |||
| -rw-r--r-- | tests/mime-detection/list | 2 |
3 files changed, 12 insertions, 0 deletions
diff --git a/data/freedesktop.org.xml.in b/data/freedesktop.org.xml.in index e2c466d..01e6ab4 100644 --- a/data/freedesktop.org.xml.in +++ b/data/freedesktop.org.xml.in @@ -7072,6 +7072,16 @@ command to generate the output files. <generic-icon name="text-x-script"/> <glob pattern="*.vbs"/> </mime-type> + <mime-type type="text/vbscript.encode"> + <comment>Encoded VBScript program</comment> + <sub-class-of type="application/x-executable"/> + <sub-class-of type="text/plain"/> + <generic-icon name="text-x-script"/> + <magic> + <match type="string" value="#@~^" offset="0"/> + </magic> + <glob pattern="*.vbe"/> + </mime-type> <mime-type type="text/x-xmi"> <comment>XMI file</comment> <acronym>XMI</acronym> diff --git a/tests/mime-detection/helloworld.vbe b/tests/mime-detection/helloworld.vbe Binary files differnew file mode 100644 index 0000000..9855f67 --- /dev/null +++ b/tests/mime-detection/helloworld.vbe diff --git a/tests/mime-detection/list b/tests/mime-detection/list index 0daad20..2697364 100644 --- a/tests/mime-detection/list +++ b/tests/mime-detection/list @@ -306,6 +306,8 @@ bug-30656-xchat.conf text/plain x helloworld.java text/x-java ox helloworld.groovy text/x-groovy ox helloworld.vbs text/vbscript ox +# Created with `srcenc.exe helloworld.vbs helloworld.vbe` +helloworld.vbe text/vbscript.encode ox build.gradle text/x-gradle ox ico.ksy text/x-kaitai-struct ox # Copied from http://asurvey.net/ccsfagent/media/survey.js |