AWL bypassing highest rules SRP using trust MSFT.Web.Browser


Enter a caption



I conducted in the past few days researches about ActiveX alongside executing upon Microsoft Office a consequently via hyperlink using UNC either anything versus to UNC/Path

[ ! ] Remarking
( Acknowledgements  ) @byt3bl33d3r

Note of Tale If you habitual about use ActiveX inside of Html-Scripting, I bet you have background around use executing AX in internet explorer but currently we have topic it’s rare in Microsoft Office, in fact, Microsoft office 2016 generally don’t read Html-AX and other files like this shape Comparing to file SVG

1 Remarking around files ActiveX in hyperlink it’s don’t working like SVG

2 SVG Document is the only which we can be putting it upon hyperlink it’s the reader lone in Microsoft office their reader named Bhyperlink

As for instance
&-1, let’s go take look at this first step to Create SVG file alongside this strings
&-2  If you have a problem, you can use this reparation


1 Download besides Creating! the affairs required
2 shouldn’t forget determination venue dropped SVG using $env function
[ Attention ] my tips to you create this file SVG manually

 $obj = $env:HOMEDRIVE + $env:HOMEPATH +"\Desktop\"
curl.exe >> $obj+x000x02.svg

1 We should confirmation upon existing file it’s healthy %100
2 ok…….The file is intact


  • 1 Currently in some sense
  • 2 We should be doing some procedure
  • 3 You will be dropped SVG in hyperlink alongside UNC/Path
  • 4 Microsoft Word is will reading SVG ActiveX without use internet explorer itself
  • 5 Follow the steps!
  • Click > insert > WordArt > Select letters > click with right mouse > hyperlink222.PNG


There stuff very cool a consequently we should not forget it’s can read ActiveX without use internet explorer leading to bypassing any Platform Secure like Device Guard After update UMCI alongside ( AWL SRP ) bug should use this beside Microsoft Office for the bypass platforms

It’s Active Currently AWL Rules!
[ 1 ] Actually we don’t need internet explorer to execute ActiveX

[ 2 ] We will use alongside Microsoft Office to ActiveX executing via SVG Document using Browser Microsoft Office

[ 3 ] remarking This Method is available with SVG Document only inside the Web Browser Microsoft Office








Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s