Record · corpus.blog/posts/01a087e3-ecb3-70e2-9564-2bd6cbbe17fe

You Have One New Appwntment: Exploiting iCalendar Properties in Enterprise Applications

spaceraccoon.dev · published 18 August 2022

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at spaceraccoon.dev Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 26
Words captured: 7,102

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://forum.defcon.org/node/241931

forum.defcon.org

https://media.defcon.org/DEF%20CON%2030/DEF%20CON%2030%20presentations/Eugene%20Lim%20-%20You%20Have%20One%20New%20Appwntment%20-%20Hacking%20Proprietary%20iCalendar%20Properties%20whitepaper.pdf

media.defcon.org

https://www.vmware.com/security/advisories/VMSA-2022-0006.html

vmware.com

https://github.com/nextcloud/security-advisories/security/advisories/GHSA-8xv5-4855-24qf

github.com

https://github.com/nextcloud/security-advisories/security/advisories/GHSA-264h-3v4w-6xh2

github.com

https://docs.microsoft.com/en-us/openspecs/exchange_server_protocols/ms-oxcical/7fd3531e-05f4-4cf5-9100-0638aa9794de

docs.microsoft.com

https://docs.microsoft.com/en-us/openspecs/exchange_server_protocols/ms-oxcical/a685a040-5b69-4c84-b084-795113fb4012

docs.microsoft.com

https://spaceraccoon.github.io/icalendardb/

spaceraccoon.github.io

https://github.com/spaceraccoon/icalendardb

github.com

https://icalendar.org/

icalendar.org

https://a.com

a.com

https://evilhost.com/exploit.html

evilhost.com

https://tools.ietf.org/html/rfc2445

tools.ietf.org

https://www.exandroid.dev/2021/04/24/phishing-with-fake-meeting-invite/

exandroid.dev

https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/phishinvite-with-malicious-ics-files/

trustwave.com

https://research.nccgroup.com/2020/05/28/exploring-macos-calendar-alerts-part-2-exfiltrating-data-cve-2020-3882/

research.nccgroup.com

https://research.nccgroup.com/2020/05/05/exploring-macos-calendar-alerts-part-1-attempting-to-execute-code/

research.nccgroup.com

https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/rn/VMware-Workspace-ONE-Boxer-for-iOS.html

docs.vmware.com

Apple pays $100,500 bug bounty for webcam hack Read at the source ↗

ryanpickren.com

https://jhftss.github.io/CVE-2022-22616-Gatekeeper-Bypass/

jhftss.github.io

https://positive.security/blog/ms-officecmd-rce

positive.security

http://www.mac4n6.com/blog/2016/1/1/manual-analysis-of-nskeyedarchiver-formatted-plist-files-a-review-of-the-new-os-x-1011-recent-items

mac4n6.com

https://datatracker.ietf.org/doc/html/rfc4791

datatracker.ietf.org

https://www.youtube.com/watch?v=Bpnc1-g3fMk

youtube.com

https://datatracker.ietf.org/doc/html/rfc5321

datatracker.ietf.org

https://googleblog.blogspot.com/2013/03/a-second-spring-of-cleaning.html

googleblog.blogspot.com