How to Evade Application Whitelisting Using REGSVR32 - Black Hills

Joff Thyer // I was recently working on a Red Team for a customer that was very much up to date with their defenses. This customer had tight egress controls, […]

Abusing Catalog Hygiene to Bypass Application Whitelisting – bohops

Powershell Constrained Language Mode Bypass - Red Team Notes

Powershell Without Powershell - How To Bypass Application Whitelisting, Environment Restrictions & AV - Black Hills Information Security

Babushka Dolls or How To Bypass Application Whitelisting and Constrained Powershell — Improsec

Windows Exploitation: regsvr32 - Hacking Articles

Babushka Dolls or How To Bypass Application Whitelisting and Constrained Powershell — Improsec

Bypassing Application Whitelisting – Security Café

Powershell Without Powershell - How To Bypass Application Whitelisting, Environment Restrictions & AV - Black Hills Information Security

Windows Exploitation: regsvr32 - Hacking Articles

Bypassing Application Whitelisting – Security Café

AppLocker Bypass – Regsvr32 – Penetration Testing Lab

Application Whitelisting Bypass with WMIC and XSL - Red Team Notes

How to Bypass Application Whitelisting & AV - Black Hills Information Security

Sensors, Free Full-Text

Babushka Dolls or How To Bypass Application Whitelisting and Constrained Powershell — Improsec