bohops.com 27. 11. 2023Abusing .NET Core CLR Diagnostic Features (+ CVE-2023-33127) – bohops.com 9. 6. 2023No Alloc, No Problem: Leveraging Program Entry Points for Process Injection – bohops.com 23. 8. 2022Investigating .NET CLR Usage Log Tampering Techniques For EDR Evasion (Part 2) – bohops.com 2. 4. 2022Unmanaged Code Execution with .NET Dynamic PInvoke – bohops.com 8. 10. 2021Analyzing and Detecting a VMTools Persistence Technique – bohops.com 7. 8. 2021CVE-2021-0090: Intel Driver & Support Assistant (DSA) Elevation of Privilege (EoP) – bohops.com 30. 5. 2021Abusing and Detecting LOLBIN Usage of .NET Development Mode Features – bohops.com 16. 3. 2021Investigating .NET CLR Usage Log Tampering Techniques For EDR Evasion – bohops.com 2. 11. 2020Exploring the WDAC Microsoft Recommended Block Rules (Part II): Wfc.exe, Fsi.exe, and FsiAnyCpu.exe – bohops.com 15. 10. 2020Exploring the WDAC Microsoft Recommended Block Rules: VisualUiaVerifyNative – bohops.com 12. 5. 2020WS-Management COM: Another Approach for WinRM Lateral Movement – bohops.com 14. 2. 2020Exploring Microsoft Teams Rooms (MTR) Console as a Potential Attack Vector – bohops.com 14. 11. 2019CVE-2019-1378: Exploiting an Access Control Privilege Escalation Vulnerability in Windows 10 Update Assistant (WUA) – bohops.com 19. 8. 2019DotNet Core: A Vector For AWL Bypass & Defense Evasion – bohops.com 4. 5. 2019Abusing Catalog Hygiene to Bypass Application Whitelisting – bohops.com 10. 1. 2019COM XSL Transformation: Bypassing Microsoft Application Control Solutions (CVE-2018-8492) – bohops.com
27. 11. 2023Abusing .NET Core CLR Diagnostic Features (+ CVE-2023-33127) – bohops.com 9. 6. 2023No Alloc, No Problem: Leveraging Program Entry Points for Process Injection – bohops.com 23. 8. 2022Investigating .NET CLR Usage Log Tampering Techniques For EDR Evasion (Part 2) – bohops.com 2. 4. 2022Unmanaged Code Execution with .NET Dynamic PInvoke – bohops.com 8. 10. 2021Analyzing and Detecting a VMTools Persistence Technique – bohops.com 7. 8. 2021CVE-2021-0090: Intel Driver & Support Assistant (DSA) Elevation of Privilege (EoP) – bohops.com 30. 5. 2021Abusing and Detecting LOLBIN Usage of .NET Development Mode Features – bohops.com 16. 3. 2021Investigating .NET CLR Usage Log Tampering Techniques For EDR Evasion – bohops.com 2. 11. 2020Exploring the WDAC Microsoft Recommended Block Rules (Part II): Wfc.exe, Fsi.exe, and FsiAnyCpu.exe – bohops.com 15. 10. 2020Exploring the WDAC Microsoft Recommended Block Rules: VisualUiaVerifyNative – bohops.com 12. 5. 2020WS-Management COM: Another Approach for WinRM Lateral Movement – bohops.com 14. 2. 2020Exploring Microsoft Teams Rooms (MTR) Console as a Potential Attack Vector – bohops.com 14. 11. 2019CVE-2019-1378: Exploiting an Access Control Privilege Escalation Vulnerability in Windows 10 Update Assistant (WUA) – bohops.com 19. 8. 2019DotNet Core: A Vector For AWL Bypass & Defense Evasion – bohops.com 4. 5. 2019Abusing Catalog Hygiene to Bypass Application Whitelisting – bohops.com 10. 1. 2019COM XSL Transformation: Bypassing Microsoft Application Control Solutions (CVE-2018-8492) – bohops.com