“a lot of the current application allowlisting bypasses that are fairly widely published now were not really public knowledge. as i was researching around the internet for application allowlisting bypasses, i came across a few twitter posts from @ subtee and, having encountered so…”
Which technique(s) should be tagged here? Pick zero or more — leaving blank just records that the original was wrong.
No matches for .
Loading techniques…
T1059.004Unix Shell
57%
“attempt to interpret any form of script. instead, the attack read the required shellcode from a file or web server and directly executed base64 - encoded shellcode contained within that file or url. after we tested and ensured that the custom malware would successfully evade the …”
Which technique(s) should be tagged here? Pick zero or more — leaving blank just records that the original was wrong.
No matches for .
Loading techniques…
T1204.002Malicious File
52%
“aka threat actor ) had just run in the door and dropped a malware payload, only to exit stage left and somehow completely avoid revealing his purpose by virtue of lucky timing?! as was also discovered later, it was fortuitous that ethan even found an unoccupied workstation withou…”
Which technique(s) should be tagged here? Pick zero or more — leaving blank just records that the original was wrong.
No matches for .
Loading techniques…
T1055.001Dynamic-link Library Injection
43%
“red teaming : a story from the trenches red teaming : a story from the trenches security consultant, malware researcher, new technology researcher evangelist. this article originally featured in the very first issue of our prompt # zine — choose wisely. you can find that issue ( …”
Which technique(s) should be tagged here? Pick zero or more — leaving blank just records that the original was wrong.
No matches for .
Loading techniques…
Summary
This article originally featured in the very first issue of our PROMPT# zine — Choose Wisely. You can find that issue (and all the others) here: https://www.blackhillsinfosec.com/prompt-zine/ I remember a […]
