Outer Web | Explore

/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.

You are here		www.hexacorn.com Beyond good ol' Run key, Part 52 \| Hexacorn
\|	\|	cocomelonc.github.io Malware development: persistence - part 19. Disk Cleanup Utility. Simple C++ example. - cocomelonc	4.3 parsecs away Travel
\|	\|		4.3 parsecs away Travel
\|	\|	oddvar.moe Persistence using RunOnceEx - Hidden from Autoruns.exe - Oddvar Moe's Blog	3.9 parsecs away Travel
\|	\|	TL;DR - Found a technique to execute DLL files without being detected by autoruns.exe at logon. - Requires administrator rights and does not belong in userland. - Run this to Exploit: reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx\0001\Depend /v 1 /d "C:\temp\messageBox64.dll" RunOnceEx I finally had some time to do someunstructured research. Withunstructured research I mean going after...	3.9 parsecs away Travel
\|	\|	oddvar.moe GPscript.exe - another LOLBin to the list - Oddvar Moe's Blog	1.3 parsecs away Travel
\|	\|	TL;DR - GPO scripts can be defined for user and started with GPScript.exe /Logon - Logonscripts do not show up in Autoruns.exe I started to play around with GPscript.exe here the other day and found some interesting stuff and I want to have this documented for the future, so therefor I wrote this blogpost...	1.3 parsecs away Travel
\|	\|	www.cyberkendra.com SpringShell: Spring Core RCE 0-day Vulnerability - Cyber Kendra	23.2 parsecs away Travel
\|		Spring4Shell: Spring core RCE vulnerability	23.2 parsecs away Travel