---
id: 8706
title: "aPAColypse now: Exploiting Windows 10 in a Local Network with WPAD/PAC and JScript"
source_domain: projectzero.google
source_url: "https://projectzero.google/2017/12/apacolypse-now-exploiting-windows-10-in_18.html"
published_at: "2017-12-18T00:00:00Z"
tags: ["rce", "windows", "lateral-movement", "project-zero", "wpad", "pac", "jscript"]
phying_url: "https://phying.com/item/8706"
lang: en
---

# aPAColypse now: Exploiting Windows 10 in a Local Network with WPAD/PAC and JScript

## Summary

A Project Zero write-up showing how a local network attacker can abuse Windows 10 WPAD/PAC proxy files, executed as JavaScript by jscript.dll, to achieve remote code execution.

## Intelligence Metadata

- **Sources:** projectzero.google
- **Published:** 2017-12-18T00:00:00Z
- **Original:** https://projectzero.google/2017/12/apacolypse-now-exploiting-windows-10-in_18.html
- **Phying News:** https://phying.com/item/8706