Assume the existence of a sealed room, containing a network with a single terminal. You are not allowed to bring in any electronic material into the room. The target machine is running default installation of windows 7 and only has MSOffice installed on of the operating system. The objective is to infect the network with a malware.
Since no electronics are allowed to be brought in, a potential solution was to print out a malware executable in any form, binary or assembly onto a piece of paper. This paper is then allowed to be brought in as it is not electronic in nature. The program would then be transcribed onto the target machine, saved as an executable then executed.
The question is whether this is possible without any additional installations as the network and terminal in question have no other means of input other than through keyboard and mouse.
The objective of this question is to check the existence of any means of code execution by means of a human medium, through purely the keyboard. Security have always been on the subject of preventing portable media to be connected to a secure system to prevent infection. What if the person were to write a malware on the target machine itself? Would it be possible with just the default installation of Windows?
The objective is arbitrary code execution. Not CMD fork bombs.
Means that has been explored:
- debug.exe doesnt ship with windows 7 and therefore we cant type assembly and run against that.
- Using notepad doesnt work as there are null characters on the ASCII table that the keyboard cannot input. This means that we cant write binary in ASCII and save it as a .COM or .EXE
- Even if you are able to, tested by copy pasting an executable opened in notepad to another file, the new file would still not run.
