How to Evade Application Whitelisting Using REGSVR32 - Black Hills

Joff Thyer // I was recently working on a Red Team for a customer that was very much up to date with their defenses. This customer had tight egress controls, […]

IronPython, darkly: how we uncovered an attack on government entities in Europe - Malware Analysis - Malware Analysis, News and Indicators

How to Bypass Application Whitelisting & AV - Black Hills Information Security

How to Bypass Application Whitelisting & AV - Black Hills Information Security

Abusing Catalog Hygiene to Bypass Application Whitelisting – bohops

Windows Exploitation: regsvr32 - Hacking Articles

Windows Exploitation: regsvr32 - Hacking Articles

How to Evade Application Whitelisting Using REGSVR32 - Black Hills Information Security

AppLocker Bypass – Regsvr32 – Penetration Testing Lab

Application Whitelisting Bypass with WMIC and XSL - Red Team Notes

Windows Exploitation: regsvr32 - Hacking Articles

How to Evade Application Whitelisting Using REGSVR32 - Black Hills Information Security

Babushka Dolls or How To Bypass Application Whitelisting and Constrained Powershell — Improsec

Powershell Without Powershell - How To Bypass Application Whitelisting, Environment Restrictions & AV - Black Hills Information Security