|
You are here |
wsummerhill.github.io | ||
| | | | |
pentestlaboratories.com
|
|
| | | | | Microsoft .NET framework is being heavily utilized by threat actors and red teams for defense evasion and staying off the radar during operations. Every .NET binary contains application domains where assemblies are loaded in a safe manner. The AppDomainManager object can be used to create new ApplicationDomains inside a .NET process. From the perspective of... | |
| | | | |
jaylittle.com
|
|
| | | | | Today's post is going to examine an ethical grey area that I currently find to be very relevant. Is it ever okay to ignore responsible disclosure standards for security related issues? Spoiler alert: I'm going to argue that there are cases in which ignoring these standards is not only permissible but the only real ethical course of action. Okay so lets start with some sample code. The below code represents a simple . | |
| | | | |
bohops.com
|
|
| | | | | Yes, you read that correctly - "Dynamic Pinvoke" as in "Dynamic Platform Invoke" Background Recently, I was browsing through Microsoft documentation and other blogs to gain a better understanding of .NET dynamic types and objects. I've always found the topic very interesting mainly due to its relative obscurity and the offensive opportunities for defensive evasion.... | |
| | | | |
www.mbid.me
|
|
| | | |||