# Windows LFI \> RFI Zero Day

**URL:** <https://community.disclose.io/t/windows-lfi-rfi-zero-day/570>\
**Category:** Write-ups and Disclosures\
**Created:** [October 25, 2022, 12:16pm UTC](https://community.disclose.io/t/windows-lfi-rfi-zero-day/570 "2022-10-25T12:16:48Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Clumsy](https://yyz2.discourse-cdn.com/flex028/user_avatar/community.disclose.io/clumsy/32/447_2.png) [@Clumsy](https://community.disclose.io/u/Clumsy)\
**Post date:** [October 25, 2022, 12:16pm UTC](https://community.disclose.io/t/windows-lfi-rfi-zero-day/570/1 "2022-10-25T12:16:48Z")

</div>

Made By Taylor Christian Newsome aka ClumsyLulz  
[Twitter](https://twitter.com/ClumsyLulz)  
[Pastebin](https://pastebin.com/u/Sleep)

```auto
for /F "tokens=1,2,3 delims= " %%A in ('reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RecoveryEnvironment" /v TargetOS') DO SET TARGETOS=%%C

for /F "tokens=1 delims=\" %%A in ('Echo %TARGETOS%') DO SET TARGETOSDRIVE=%%A

copy /y %TARGETOSDRIVE%\Recovery\OEM\Unattend.xml %TARGETOSDRIVE%\Windows\panther
copy /y %TARGETOSDRIVE%\Recovery\OEM\LayoutModification.xml %TARGETOSDRIVE%\Users\Default\AppData\Local\Microsoft\Windows\Shell\
copy /y %TARGETOSDRIVE%\Recovery\OEM\LayoutModification.json %TARGETOSDRIVE%\Users\Default\AppData\Local\Microsoft\Windows\Shell\
copy /y %TARGETOSDRIVE%\Recovery\OEM\TaskbarLayoutModification.xml %TARGETOSDRIVE%\Windows\OEM\
   
xcopy /cherky %TARGETOSDRIVE%\Recovery\OEM\Info %TARGETOSDRIVE%\Windows\System32\OOBE\info\

md %TARGETOSDRIVE%\Windows\ASUS\OOBEProc
echo if exist C:\Intel attrib +h C:\Intel >> %TARGETOSDRIVE%\Windows\ASUS\OOBEProc\OOBEIns.cmd
echo if exist C:\PerfLogs attrib +h C:\PerfLogs >> %TARGETOSDRIVE%\Windows\ASUS\OOBEProc\OOBEIns.cmd
echo attrib +h C:\*.* >> %TARGETOSDRIVE%\Windows\ASUS\OOBEProc\OOBEIns.cmd
echo if exist C:\Intel attrib +h C:\Intel >> %TARGETOSDRIVE%\Windows\ASUS\OOBEProc\AsLogonIns.cmd
echo if exist C:\PerfLogs attrib +h C:\PerfLogs >> %TARGETOSDRIVE%\Windows\ASUS\OOBEProc\AsLogonIns.cmd
echo attrib +h C:\*.* >> %TARGETOSDRIVE%\Windows\ASUS\OOBEProc\AsLogonIns.cmd
echo if exist C:\Intel attrib +h C:\Intel >> %TARGETOSDRIVE%\Windows\ASUS\OOBEProc\AsusLogonIns.cmd
echo if exist C:\PerfLogs attrib +h C:\PerfLogs >> %TARGETOSDRIVE%\Windows\ASUS\OOBEProc\AsusLogonIns.cmd
echo attrib +h C:\*.* >> %TARGETOSDRIVE%\Windows\ASUS\OOBEProc\AsusLogonIns.cmd

rem OEM setting
copy /y %TARGETOSDRIVE%\Windows\ASUS\Shortcuts\*.lnk %TARGETOSDRIVE%\Users\Public\Desktop\ 
del /s /q "%TARGETOSDRIVE%\Users\Public\Desktop\Media Player Center.lnk"
del /s /q "%TARGETOSDRIVE%\Users\Public\Desktop\Messenger Center.lnk"
del /s /q "%TARGETOSDRIVE%\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Player Center.lnk"
del /s /q "%TARGETOSDRIVE%\ProgramData\Microsoft\Windows\Start Menu\Programs\Messenger Center.lnk"

rem Fix PC becomes sluggish
REG LOAD HKLM\TempReg "%TARGETOSDRIVE%\Windows\System32\config\SOFTWARE"
REG ADD "HKLM\TempReg\Microsoft\Windows Search" /v RebuildIndex /t REG_DWORD /d 7 /f
REG UNLOAD HKLM\TempReg   

   
rem Recovery Comman   
if exist %~dp0oemsetupRecovery.OEMTA.4287.cmd call %~dp0oemsetupRecovery.OEMTA.4287.cmd  

```