/explore
|
You are here 
|
cocomelonc.github.io | ||
| | | | |
openpunk.com
Recently I faced a rather intimidating problem while working on a project. The problem was fairly simple from an objective point of view: "How do I load a DLL into a process on startup?" Now you might be wondering, "Why not just patch the IAT (import address table) on the executable and force it to load your payload DLL?" Yes! That was my exact thoughts too, however for reasons I'll explain it wasn't that simple. |
|
| | | | | ||
| | | | |
thinkdfir.com
In preparation for an upcoming FOR500 class I thought I would test out one of the recent additions to the class. This post by my colleague Zach shows that Win10 1903 and later has a registry key that will store the full path of any executable that utilises the computers camera or microphone. Zach shows... |
|
| | | | | ||
| | | | |
ogmini.github.io
Messing around with Windows Defender just to download and execute LaZagne locally leaves artifacts behind related to exclusions. There are of course other more stealthy ways to run LaZagne by using RATs such as Pupy or Meterpreter/Metasploit. This post will list out the Registry Keys and Event Logs related to Windows Defender. |
|
| | | | | ||
| | | | |
www.thezdi.com
[AI summary] A security researcher details the discovery, exploitation, and mitigation of a critical remote code execution vulnerability in the NVIDIA Merlin Transformers4Rec library caused by unsafe Pickle deserialization. |
|
| | | |||
