You are browsing the archive for Autostart (Persistence).

Beyond good ol’ Run key, Part 136

January 18, 2022 in Autostart (Persistence), Living off the land, LOLBins

I love Office-based Persistence mechanisms, because there is always… one more to discover 🙂 Take your Winword.exe from Office 2021 or Office 365. When it loads, it check if the […]

Beyond good ol’ Run key, Part 135

January 16, 2022 in Autostart (Persistence)

These days I post most of the new stuff on Twitter as no one reads blogs anymore, right? 🙂 Still, good to document some of it in a more permanent […]