/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 cihansol.com
Windows DLL Proxying/Hijacking - Dev Blog
| | macrosec.tech
Persistence: Common Userland Techniques (Part 2) - MacroSEC
3.8 parsecs away

Travel
| | The first thing we need to do is to identify which dll is crucial for discord to run because that is the dll we will use to perform dll hijacking. In order to find out, we need to open the file location of discord and we see: To identify the COM Keys of Chrome that we can use for COM Hijacking, we use the tool Process Monitor to identify all the processes running when Chrome runs, we also discover the COM servers that are missing CLSID's and the ones which don't require elevated privileges. We use the following filters:
| | itm4n.github.io
Windows Privilege Escalation - DLL Proxying | itm4n's blog
1.1 parsecs away

Travel
| | DLL Hijacking is the first Windows privilege escalation technique I worked on as a junior pentester, with the IKEEXT service on Windows 7 (or Windows Server 2008 R2). Here, I'd like to discuss one of its variants - DLL Proxying - and provide a step-by-step guide for easily crafting a custom DLL wrapper in the context of a privilege escalation.
| | googleprojectzero.blogspot.com
Project Zero: Windows Exploitation Tricks: Exploiting Arbitrary File Writes for Local Elevation of Privilege
4.1 parsecs away

Travel
| | Posted by James Forshaw, Project Zero Previously I presented a technique to exploit arbitrary directory creation vulnerabilities on Wi...
| | www.securitynik.com
Learning by practicing: Beginning Powershell Empire - The Attack in 10 steps
23.3 parsecs away

Travel
| In this 5 part series, I'm learning more about Powershell Empire from the perspectives of using the tool, analyzing the logs which gets crea...