You are browsing the archive for Autostart (Persistence).

Beyond good ol’ Run key, Part 134

May 3, 2021 in Archaeology, Autostart (Persistence)

This one is for historical reasons, primarily. Old Adobe Photoshop/ImageReady used to have a feature called “Jump to” which is neatly described here. The feature was implemented via a simple […]

Debug Environment Variable are \o/

May 3, 2021 in Autostart (Persistence), Living off the land, LOLBins

Looking at the list of debug environment variables one can immediately spot a lot of room for abuse. One can hypothesize that setting e.g. _NT_SYMBOL_PATH, _NT_ALT_SYMBOL_PATH, _NT_SYMBOL_PROXY, SRCSRV_INI_FILE to point […]