How to Evade Application Whitelisting Using REGSVR32 - Black Hills

Joff Thyer // I was recently working on a Red Team for a customer that was very much up to date with their defenses. This customer had tight egress controls, […]

Babushka Dolls or How To Bypass Application Whitelisting and Constrained Powershell — Improsec

Babushka Dolls or How To Bypass Application Whitelisting and Constrained Powershell — Improsec

How to create an Application Whitelist Policy in Windows

How to create an Application Whitelist Policy in Windows

Babushka Dolls or How To Bypass Application Whitelisting and Constrained Powershell — Improsec

Babushka Dolls or How To Bypass Application Whitelisting and Constrained Powershell — Improsec

How to Bypass Application Whitelisting & AV - Black Hills Information Security

Babushka Dolls or How To Bypass Application Whitelisting and Constrained Powershell — Improsec

How do you block Regsvr32.exe/Regsvr64.exe using windows firewall? Windows 10 Forums

How to Bypass Application Whitelisting & AV - Black Hills Information Security

How to Evade Application Whitelisting Using REGSVR32 - Black Hills Information Security

Bypassing Application Whitelisting with runscripthelper.exe, by Matt Graeber

Sensors, Free Full-Text

Application Whitelisting Bypass with WMIC and XSL - Red Team Notes

Babushka Dolls or How To Bypass Application Whitelisting and Constrained Powershell — Improsec