Quantcast
Channel: Files from Casey Smith ≈ Packet Storm
Browsing all 3 articles
Browse latest View live

AppLocker Execution Prevention Bypass

This Metasploit module will generate a .NET service executable on the target and utilise InstallUtil to run the payload bypassing the AppLocker protection. Currently only the InstallUtil method is...

View Article



Regsvr32.exe (.sct) Application Whitelisting Bypass Server

This Metasploit module simplifies the Regsvr32.exe Application Whitelisting Bypass technique. The module creates a web server that hosts an .sct file. When the user types the provided regsvr32 command...

View Article

Windows Escalate UAC Protection Bypass Via Dot Net Profiler

Microsoft Windows allows for the automatic loading of a profiling COM object during the launch of a CLR process based on certain environment variables ostensibly to monitor execution. In this case, the...

View Article
Browsing all 3 articles
Browse latest View live




Latest Images