SUPPORT MY WORK BY BECOMMING PATREON
---------------------------------------------------
patreon.com/Lsecqt
DESCRIPTION
---------------------------------------------------
Check out my latest video where I dive into the recently shared tool for injecting malware into explorer.exe. I showcase the technique, explain the code step by step and finally weaponize the tool into executing meterpreter payload.
LINKS
---------------------------------------------------
Blogpost from Offsec: www.offsec.com/offsec/amsi-write-raid-0day-vulnera…
Vixx's github: github.com/V-i-x-x/AMSI-BYPASS/
AMSI Bypass repo: github.com/S3cur3Th1sSh1t/Amsi-Bypass-Powershell
FOLLOW ME
---------------------------------------------------
Twitter: twitter.com/lsecqt
Twitch: www.twitch.tv/lsecqt
Reddit: www.reddit.com/user/lsecqt
Medium: medium.com/@lsecqt
Support my Work: www.buymeacoffee.com/lsecqt
Red Teaming Army Discord Server: discord.gg/dWCe5ZMvtQ Red Teaming Army Blog: lsecqt.github.io/Red-Teaming-Army/
Red Teaming Army Blog: lsecqt.github.io/Red-Teaming-Army/
TIMESTAMPS
---------------------------------------------------
00:00 - Intro
00:57 - How does IconJector works?
03:54 - Simple code walkthrough
08:29 - Weaponizing the tool with Meterpreter payload
12:00 - Fixing missing icon error
14:33 - Weaponized demo and my thoughts on the project
コメント