Red Teaming Experiments

Ctrlk

Code Execution

T1117: regsvr32 T1170: MSHTA T1196: Control Panel Item Executing Code as a Control Panel Item through an Exported Cplapplet Function Code Execution through Control Panel Add-ins T1191: CMSTP T1118: InstallUtil Using MSBuild to Execute Shellcode in C#T1202: Forfiles Indirect Command Execution Application Whitelisting Bypass with WMIC and XSL Powershell Without Powershell.exe Powershell Constrained Language Mode ByPass Forcing Iexplore.exe to Load a Malicious DLL via COM Abuse T1216: pubprn.vbs Signed Script Code Execution

PreviousNetNTLMv2 hash stealing using Outlook NextT1117: regsvr32

Last updated 4 years ago

Was this helpful?