EVIL MSI. A STORY ABOUT VULNERABILITIES IN MSI FILES

Summary from the TLDR InfoSec newsletter

This post provides a primer on finding vulnerabilities in MSI files. It begins with an overview of the MSI file format and details the tables that may be relevant. It then covers ways to enumerate MSI files and common attack vectors such as abandoned credentials, custom actions, and GUI escapes. The post also provides examples of utilizing tools to automate the procedure as well as a tool that they wrote.