If you ask nice maybe I drop how to make an .exe file that deletes it self while running and continues running after deletion.
-
This Tweet is unavailable.
-
This Tweet is unavailable.
-
This Tweet is unavailable.
-
This Tweet is unavailable.
-
sure- https://www.youtube.com/watch?v=Y1YJCKfvJEM … https://www.youtube.com/watch?v=0KO3oGXtMNo … https://github.com/googleprojectzero/symboliclink-testing-tools … http://www.zezula.net/en/fstools/filetest.html … and procmon your initial goal should be to either create writeable file in system32 create writeable dir in system32
for targets
start procmon
higlight everything running with system integrity
ingore registry and network entries
run forfiles /m *.msi /P C:\windows\installer /C "cmd /c msiexec /qn /i @file"
there is decent chance for finding exploitable conditions there- i found one last week