https://enigma0x3.net/2023/10/26/cve-2023-4632-local-privilege-escalation-in-lenovo-system-updater/https://enigma0x3.net/wp-content/uploads/2023/10/custom_xml_lenovo-1.pngcustom_xml_lenovo-1https://enigma0x3.net/wp-content/uploads/2023/10/poc_output.pngpoc_outputhttps://enigma0x3.net/wp-content/uploads/2023/10/lenovo_overwrite.pnglenovo_overwritehttps://enigma0x3.net/wp-content/uploads/2023/10/7-file_write_webex.png7-file_write_webexhttps://enigma0x3.net/wp-content/uploads/2023/10/custom_xml_lenovo-copy-1.pngcustom_xml_lenovo-copy-1https://enigma0x3.net/wp-content/uploads/2023/10/custom_xml_lenovo.pngcustom_xml_lenovohttps://enigma0x3.net/wp-content/uploads/2023/10/5-client_code.png5-client_codehttps://enigma0x3.net/wp-content/uploads/2023/10/4-writing_malicious_xml_to_programdata.png4-writing_malicious_xml_to_programdatahttps://enigma0x3.net/wp-content/uploads/2023/10/8-final_codeex-copy.png8-final_codeex-copyhttps://enigma0x3.net/wp-content/uploads/2023/10/custom_xml_lenovo-copy.pngcustom_xml_lenovo-copy2023-10-26T16:56:34+00:00monthlyhttps://enigma0x3.net/2020/01/15/avira-vpn-local-privilege-escalation-via-insecure-update-location/https://enigma0x3.net/wp-content/uploads/2020/01/screen-shot-2020-01-15-at-10.05.16-am.pngScreen Shot 2020-01-15 at 10.05.16 AMhttps://enigma0x3.net/wp-content/uploads/2020/01/screen-shot-2020-01-15-at-10.04.19-am.pngScreen Shot 2020-01-15 at 10.04.19 AMhttps://enigma0x3.net/wp-content/uploads/2020/01/screen-shot-2020-01-15-at-10.03.55-am.pngScreen Shot 2020-01-15 at 10.03.55 AMhttps://enigma0x3.net/wp-content/uploads/2020/01/screen-shot-2020-01-15-at-10.03.23-am.pngScreen Shot 2020-01-15 at 10.03.23 AMhttps://enigma0x3.net/wp-content/uploads/2020/01/screen-shot-2020-01-15-at-10.02.52-am.pngScreen Shot 2020-01-15 at 10.02.52 AMhttps://enigma0x3.net/wp-content/uploads/2020/01/screen-shot-2020-01-15-at-10.02.12-am.pngScreen Shot 2020-01-15 at 10.02.12 AMhttps://enigma0x3.net/wp-content/uploads/2020/01/screen-shot-2020-01-15-at-10.01.42-am.pngScreen Shot 2020-01-15 at 10.01.42 AMhttps://enigma0x3.net/wp-content/uploads/2020/01/screen-shot-2020-01-15-at-10.01.06-am.pngScreen Shot 2020-01-15 at 10.01.06 AMhttps://enigma0x3.net/wp-content/uploads/2020/01/screen-shot-2020-01-15-at-10.00.16-am.pngUpdateLogic2020-01-15T15:17:16+00:00monthlyhttps://enigma0x3.net/2019/12/10/cve-2019-19248-local-privilege-escalation-in-eas-origin-client/https://enigma0x3.net/wp-content/uploads/2019/12/screen-shot-2019-12-10-at-9.49.07-am.pngScreen Shot 2019-12-10 at 9.49.07 AMhttps://enigma0x3.net/wp-content/uploads/2019/12/screen-shot-2019-12-10-at-9.48.31-am.pngScreen Shot 2019-12-10 at 9.48.31 AMhttps://enigma0x3.net/wp-content/uploads/2019/12/screen-shot-2019-12-10-at-9.48.05-am.pngScreen Shot 2019-12-10 at 9.48.05 AMhttps://enigma0x3.net/wp-content/uploads/2019/12/screen-shot-2019-12-10-at-9.46.55-am.pngScreen Shot 2019-12-10 at 9.46.55 AMhttps://enigma0x3.net/wp-content/uploads/2019/12/screen-shot-2019-12-10-at-9.46.29-am.pngScreen Shot 2019-12-10 at 9.46.29 AMhttps://enigma0x3.net/wp-content/uploads/2019/12/screen-shot-2019-12-10-at-9.31.55-am.pngScreen Shot 2019-12-10 at 9.31.55 AMhttps://enigma0x3.net/wp-content/uploads/2019/12/screen-shot-2019-12-10-at-8.34.16-am.pngOrigin Helper Service2019-12-12T19:50:35+00:00monthlyhttps://enigma0x3.net/2019/08/29/avira-optimizer-local-privilege-escalation/https://enigma0x3.net/wp-content/uploads/2019/08/avira_cmd_system.pngavira_cmd_systemhttps://enigma0x3.net/wp-content/uploads/2019/08/avira_final_exploit.pngavira_final_exploithttps://enigma0x3.net/wp-content/uploads/2019/08/avira_service_arguments.pngavira_service_argumentshttps://enigma0x3.net/wp-content/uploads/2019/08/avira_service_host_instantiation-1.pngavira_service_host_instantiationhttps://enigma0x3.net/wp-content/uploads/2019/08/avira_send_message.pngavira_send_messagehttps://enigma0x3.net/wp-content/uploads/2019/08/avira_start_process.pngavira_start_processhttps://enigma0x3.net/wp-content/uploads/2019/08/avira_service_host_instantiation.pngavira_service_host_instantiationhttps://enigma0x3.net/wp-content/uploads/2019/08/avira_pipe_connect.pngavira_pipe_connecthttps://enigma0x3.net/wp-content/uploads/2019/08/avira_start_service_host.pngavira_start_service_hosthttps://enigma0x3.net/wp-content/uploads/2019/08/avira_client_check.pngavira_client_check2019-08-29T18:41:12+00:00monthlyhttps://enigma0x3.net/2019/07/24/cve-2019-13382-privilege-escalation-in-snagit/https://enigma0x3.net/wp-content/uploads/2019/07/snagit-cmd-as-system.pngSnagit cmd as SYSTEMhttps://enigma0x3.net/wp-content/uploads/2019/07/snagit-file-copy.pngsnagit file copyhttps://enigma0x3.net/wp-content/uploads/2019/07/snagit-ualapi-acl.pngSnagit ualapi ACLhttps://enigma0x3.net/wp-content/uploads/2019/07/movefile-documentation.pngMoveFile Documentationhttps://enigma0x3.net/wp-content/uploads/2019/07/snagit-ualapi-creation.pngSnagit ualapi creationhttps://enigma0x3.net/wp-content/uploads/2019/07/snagit-symlink-hit.pngSnagIt Symlink hithttps://enigma0x3.net/wp-content/uploads/2019/07/snagit-symlink.pngSnagit Symlinkhttps://enigma0x3.net/wp-content/uploads/2019/07/snagit-invalid-presentations-acl.pngSnagIT Invalid Presentations ACLhttps://enigma0x3.net/wp-content/uploads/2019/07/snagit-move-file-1.pngSnagit Move File 1https://enigma0x3.net/wp-content/uploads/2019/07/snagit-xml-query-success.pngSnagit XML Query Success2019-07-26T06:50:09+00:00monthlyhttps://enigma0x3.net/2019/07/05/cve-2019-13142-razer-surround-1-1-63-0-eop/https://enigma0x3.net/wp-content/uploads/2019/07/screen-shot-2019-07-05-at-1.28.54-pm.pngScreen Shot 2019-07-05 at 1.28.54 PMhttps://enigma0x3.net/wp-content/uploads/2019/06/system.pngsystemhttps://enigma0x3.net/wp-content/uploads/2019/06/file_copy.pngfile_copyhttps://enigma0x3.net/wp-content/uploads/2019/06/folder_dacl.pngfolder_daclhttps://enigma0x3.net/wp-content/uploads/2019/06/imagepath.pngImagePath2019-07-05T18:35:12+00:00monthlyhttps://enigma0x3.net/2019/03/20/avira-vpn-2-15-2-28160-elevation-of-privilege-through-insecure-update-location/https://enigma0x3.net/wp-content/uploads/2019/03/eop.pngeophttps://enigma0x3.net/wp-content/uploads/2019/03/dll_load.pngdll_loadhttps://enigma0x3.net/wp-content/uploads/2019/03/toastnotifier.pngtoastnotifierhttps://enigma0x3.net/wp-content/uploads/2019/03/is_signed.pngis_signedhttps://enigma0x3.net/wp-content/uploads/2019/03/isupdateinstalled.pngisupdateinstalledhttps://enigma0x3.net/wp-content/uploads/2019/03/temp_update.pngtemp_updatehttps://enigma0x3.net/wp-content/uploads/2019/03/update.pngupdatehttps://enigma0x3.net/wp-content/uploads/2019/03/wscript_html.pngwscript_html2019-03-20T23:50:49+00:00monthlyhttps://enigma0x3.net/2019/03/20/avira-vpn-2-15-2-28160-elevation-of-privilege/https://enigma0x3.net/wp-content/uploads/2019/03/img9.pngimg9https://enigma0x3.net/wp-content/uploads/2019/03/img8.pngimg8https://enigma0x3.net/wp-content/uploads/2019/03/img7.pngimg7https://enigma0x3.net/wp-content/uploads/2019/03/img6.pngimg6https://enigma0x3.net/wp-content/uploads/2019/03/img5.pngimg5https://enigma0x3.net/wp-content/uploads/2019/03/img4.pngimg4https://enigma0x3.net/wp-content/uploads/2019/03/img3.pngimg3https://enigma0x3.net/wp-content/uploads/2019/03/img2.pngimg2https://enigma0x3.net/wp-content/uploads/2019/03/img1.pngimg12019-03-20T22:05:20+00:00monthlyhttps://enigma0x3.net/2019/01/21/razer-synapse-3-elevation-of-privilege/https://enigma0x3.net/wp-content/uploads/2019/01/13_winverify_trust.png13_winverify_trusthttps://enigma0x3.net/wp-content/uploads/2019/01/12_razer_verify_fix.png12_razer_verify_fixhttps://enigma0x3.net/wp-content/uploads/2019/01/11_razer_eop_exploited.png11_razer_eop_exploitedhttps://enigma0x3.net/wp-content/uploads/2019/01/10_cloned_cert.png10_cloned_certhttps://enigma0x3.net/wp-content/uploads/2019/01/9_sigpirate_clone.png9_sigpirate_clonehttps://enigma0x3.net/wp-content/uploads/2019/01/8_assembly_code.png8_assembly_codehttps://enigma0x3.net/wp-content/uploads/2019/01/7_register_packages.png7_register_packageshttps://enigma0x3.net/wp-content/uploads/2019/01/6_adding_assembly.png6_adding_assemblyhttps://enigma0x3.net/wp-content/uploads/2019/01/5_interface_-check.png5_interface_ checkhttps://enigma0x3.net/wp-content/uploads/2019/01/4_cert_compare.png4_cert_compare2019-01-21T16:10:00+00:00monthlyhttps://enigma0x3.net/2018/10/23/cve-2018-8414-a-case-study-in-responsible-disclosure/https://enigma0x3.net/wp-content/uploads/2018/10/msrc_comment.pngMSRC_Commenthttps://enigma0x3.net/wp-content/uploads/2018/10/bounty_amount.pngbounty_amounthttps://enigma0x3.net/wp-content/uploads/2018/10/cve_patch_tuesday.pngcve_patch_tuesdayhttps://enigma0x3.net/wp-content/uploads/2018/10/cve_assigned.pngcve_assignedhttps://enigma0x3.net/wp-content/uploads/2018/10/cve_slot_question.pngcve_slot_questionhttps://enigma0x3.net/wp-content/uploads/2018/10/bounty_notice.pngbounty_noticehttps://enigma0x3.net/wp-content/uploads/2018/10/comp_fix.pngcomp_fixhttps://enigma0x3.net/wp-content/uploads/2018/10/asked_for_another_update.pngasked_for_another_updatehttps://enigma0x3.net/wp-content/uploads/2018/10/response_to_case_change.pngresponse_to_case_changehttps://enigma0x3.net/wp-content/uploads/2018/10/case_reassigned_again.pngcase_reassigned_again2018-10-23T15:03:48+00:00monthlyhttps://enigma0x3.net/2018/10/10/cve-2018-8212-device-guard-clm-bypass-using-msft_scriptresource/https://enigma0x3.net/wp-content/uploads/2018/10/5.png5https://enigma0x3.net/wp-content/uploads/2018/10/4.png4https://enigma0x3.net/wp-content/uploads/2018/10/3.png3https://enigma0x3.net/wp-content/uploads/2018/10/2.png2https://enigma0x3.net/wp-content/uploads/2018/10/picture1.pngPicture12018-10-10T15:32:40+00:00monthlyhttps://enigma0x3.net/2018/06/11/the-tale-of-settingcontent-ms-files/https://enigma0x3.net/wp-content/uploads/2018/06/final-bypass.pngfinal-bypasshttps://enigma0x3.net/wp-content/uploads/2018/06/full_asr-bypass-payload.pngfull_asr-bypass-payloadhttps://enigma0x3.net/wp-content/uploads/2018/06/proxy-binary.pngproxy-binaryhttps://enigma0x3.net/wp-content/uploads/2018/06/settingcontent-excel-asr-success.pngsettingcontent-excel-asr-successhttps://enigma0x3.net/wp-content/uploads/2018/06/settingcontent-excel.pngsettingcontent-excelhttps://enigma0x3.net/wp-content/uploads/2018/06/office-child-proc.pngoffice-child-prochttps://enigma0x3.net/wp-content/uploads/2018/06/ole-asr-block-settingcontent.pngole-asr-block-settingcontenthttps://enigma0x3.net/wp-content/uploads/2018/06/ole-block-evade.pngOLE-block-evadehttps://enigma0x3.net/wp-content/uploads/2018/06/settingcontent-ole.pngsettingContent-OLEhttps://enigma0x3.net/wp-content/uploads/2018/06/motw-on-file.pngMOTW-on-file2018-06-11T15:03:28+00:00monthlyhttps://enigma0x3.net/2018/01/29/reviving-dde-using-onenote-and-excel-for-code-execution/https://enigma0x3.net/wp-content/uploads/2018/01/demo.gifdemohttps://enigma0x3.net/wp-content/uploads/2018/01/calc.pngcalchttps://enigma0x3.net/wp-content/uploads/2018/01/dde_exec_prompt.pngdde_exec_prompthttps://enigma0x3.net/wp-content/uploads/2018/01/document_import.pngdocument_importhttps://enigma0x3.net/wp-content/uploads/2018/01/insert_option.pnginsert_optionhttps://enigma0x3.net/wp-content/uploads/2018/01/blocked_new.pngblocked_newhttps://enigma0x3.net/wp-content/uploads/2018/01/testexecution.pngtestexecutionhttps://enigma0x3.net/wp-content/uploads/2018/01/changetitle.pngchangetitlehttps://enigma0x3.net/wp-content/uploads/2018/01/inserttab.pnginserttabhttps://enigma0x3.net/wp-content/uploads/2018/01/blocked_due_to_reg_mitigations.pngblocked_due_to_reg_mitigations2018-01-29T16:31:57+00:00monthlyhttps://enigma0x3.net/2017/11/16/lateral-movement-using-outlooks-createobject-method-and-dotnettojscript/https://enigma0x3.net/wp-content/uploads/2017/11/execution.pngexecutionhttps://enigma0x3.net/wp-content/uploads/2017/11/add_code_to_object.pngadd_code_to_objecthttps://enigma0x3.net/wp-content/uploads/2017/11/jscript_in_variable.pngjscript_in_variablehttps://enigma0x3.net/wp-content/uploads/2017/11/payload_jscript.pngpayload_jscripthttps://enigma0x3.net/wp-content/uploads/2017/11/poc_code.pngPoC_codehttps://enigma0x3.net/wp-content/uploads/2017/11/script_control_gm.pngscript_control_gmhttps://enigma0x3.net/wp-content/uploads/2017/11/create_object_exposed.pngcreate_object_exposedhttps://enigma0x3.net/wp-content/uploads/2017/11/outlook_remote_instantiation.pngoutlook_remote_instantiation2017-11-16T17:00:26+00:00monthlyhttps://enigma0x3.net/2017/11/06/a-look-at-cve-2017-8715-bypassing-cve-2017-0218-using-powershell-module-manifests/https://enigma0x3.net/wp-content/uploads/2017/11/psd1_bypass.pngpsd1_bypasshttps://enigma0x3.net/wp-content/uploads/2017/11/psd1_example.pngpsd1_examplehttps://enigma0x3.net/wp-content/uploads/2017/11/module_import.pngmodule_importhttps://enigma0x3.net/wp-content/uploads/2017/11/export-modulemember-example.pngexport-modulemember-examplehttps://enigma0x3.net/wp-content/uploads/2017/11/failed_import.pngfailed_importhttps://enigma0x3.net/wp-content/uploads/2017/11/picture1.pngPicture12017-11-06T15:12:35+00:00monthlyhttps://enigma0x3.net/2017/10/19/umci-bypass-using-psworkflowutility-cve-2017-0215/https://enigma0x3.net/wp-content/uploads/2017/10/new_ps_workflow.pngnew_ps_workflowhttps://enigma0x3.net/wp-content/uploads/2017/10/workflow_bypass_execution.pngworkflow_bypass_executionhttps://enigma0x3.net/wp-content/uploads/2017/10/iex_psworkflowutility1.pngiex_psworkflowutilityhttps://enigma0x3.net/wp-content/uploads/2017/10/iex_psworkflowutility.pngIex_psworkflowutility2017-10-19T14:58:07+00:00monthlyhttps://enigma0x3.net/2017/09/11/lateral-movement-using-excel-application-and-dcom/https://enigma0x3.net/wp-content/uploads/2017/09/execution_with_vba_lockeddown.pngexecution_with_vba_lockeddownhttps://enigma0x3.net/wp-content/uploads/2017/09/macro_execution.pngmacro_executionhttps://enigma0x3.net/wp-content/uploads/2017/09/successful_workbook_open.pngsuccessful_workbook_openhttps://enigma0x3.net/wp-content/uploads/2017/09/system_profile_creation.pngsystem_profile_creationhttps://enigma0x3.net/wp-content/uploads/2017/09/open_error.pngopen_errorhttps://enigma0x3.net/wp-content/uploads/2017/09/copy_payload.pngcopy_payloadhttps://enigma0x3.net/wp-content/uploads/2017/09/macro.pngmacrohttps://enigma0x3.net/wp-content/uploads/2017/09/remote_activation.pngremote_activationhttps://enigma0x3.net/wp-content/uploads/2017/09/default_dcom_perms.pngdefault_dcom_permshttps://enigma0x3.net/wp-content/uploads/2017/09/excel_appid.pngexcel_appid2017-09-11T14:53:12+00:00monthlyhttps://enigma0x3.net/2017/08/24/umci-vs-internet-explorer-exploring-cve-2017-8625/https://enigma0x3.net/wp-content/uploads/2017/08/reg_import.pngreg_importhttps://enigma0x3.net/wp-content/uploads/2017/08/iexplore_execution.pngiexplore_executionhttps://enigma0x3.net/wp-content/uploads/2017/08/wscript_html.pngwscript_html2017-08-24T16:38:26+00:00monthlyhttps://enigma0x3.net/2017/08/03/wsh-injection-a-case-study/https://enigma0x3.net/wp-content/uploads/2017/08/pubprn_execution.pngpubprn_executionhttps://enigma0x3.net/wp-content/uploads/2017/08/pubprn_vuln.pngpubprn_vuln2017-08-03T15:11:00+00:00monthlyhttps://enigma0x3.net/2017/07/19/bypassing-amsi-via-com-server-hijacking/https://enigma0x3.net/wp-content/uploads/2017/07/fix_bypass_execution.pngfix_bypass_executionhttps://enigma0x3.net/wp-content/uploads/2017/07/amsi_dll_hijack.pngamsi_dll_hijackhttps://enigma0x3.net/wp-content/uploads/2017/07/procmon_filter.pngprocmon_filterhttps://enigma0x3.net/wp-content/uploads/2017/07/amsi_diff.pngamsi_diffhttps://enigma0x3.net/wp-content/uploads/2017/07/amsi_bypass_execution.pngamsi_bypass_executionhttps://enigma0x3.net/wp-content/uploads/2017/07/hijack_execution.pnghijack_executionhttps://enigma0x3.net/wp-content/uploads/2017/07/hijack_regentry.pnghijack_regentryhttps://enigma0x3.net/wp-content/uploads/2017/07/amsi_procmon.pngamsi_procmonhttps://enigma0x3.net/wp-content/uploads/2017/07/co_createinstance.pngco_createinstancehttps://enigma0x3.net/wp-content/uploads/2017/07/amsi_exports.pngamsi_exports2017-07-19T14:44:47+00:00monthlyhttps://enigma0x3.net/2017/07/13/phishing-against-protected-view/https://enigma0x3.net/wp-content/uploads/2017/07/screen-shot-2017-07-13-at-7-41-18-am.pngScreen Shot 2017-07-13 at 7.41.18 AMhttps://enigma0x3.net/wp-content/uploads/2017/07/screen-shot-2017-07-12-at-5-12-09-pm.pngScreen Shot 2017-07-12 at 5.12.09 PMhttps://enigma0x3.net/wp-content/uploads/2017/07/screen-shot-2017-07-12-at-5-09-56-pm.pngScreen Shot 2017-07-12 at 5.09.56 PMhttps://enigma0x3.net/wp-content/uploads/2017/07/screen-shot-2017-07-12-at-5-07-04-pm.pngScreen Shot 2017-07-12 at 5.07.04 PMhttps://enigma0x3.net/wp-content/uploads/2017/07/screen-shot-2017-07-12-at-5-03-57-pm.pngScreen Shot 2017-07-12 at 5.03.57 PMhttps://enigma0x3.net/wp-content/uploads/2017/07/screen-shot-2017-07-12-at-4-09-34-pm.pngScreen Shot 2017-07-12 at 4.09.34 PMhttps://enigma0x3.net/wp-content/uploads/2017/07/screen-shot-2017-07-12-at-4-07-00-pm.pngScreen Shot 2017-07-12 at 4.07.00 PMhttps://enigma0x3.net/wp-content/uploads/2017/07/screen-shot-2017-07-12-at-3-57-38-pm.pngScreen Shot 2017-07-12 at 3.57.38 PMhttps://enigma0x3.net/wp-content/uploads/2017/07/screen-shot-2017-07-12-at-2-56-48-pm.pngScreen Shot 2017-07-12 at 2.56.48 PMhttps://enigma0x3.net/wp-content/uploads/2017/07/screen-shot-2017-07-12-at-2-51-45-pm.pngScreen Shot 2017-07-12 at 2.51.45 PM2017-07-13T16:47:46+00:00monthlyhttps://enigma0x3.net/presentations/2017-05-23T22:20:59+00:00weekly0.6https://enigma0x3.net/2017/04/03/defeating-device-guard-a-look-into-cve-2017-0007/https://enigma0x3.net/wp-content/uploads/2017/04/blocked_execution.pngblocked_executionhttps://enigma0x3.net/wp-content/uploads/2017/04/after_al_set_continue.pngafter_al_set_continuehttps://enigma0x3.net/wp-content/uploads/2017/04/al_getting_set.pngal_getting_sethttps://enigma0x3.net/wp-content/uploads/2017/04/new_function_check.pngnew_function_checkhttps://enigma0x3.net/wp-content/uploads/2017/04/added_check.pngadded_checkhttps://enigma0x3.net/wp-content/uploads/2017/04/continued_execution.pngcontinued_executionhttps://enigma0x3.net/wp-content/uploads/2017/04/correct_bug.pngcorrect_bughttps://enigma0x3.net/wp-content/uploads/2017/04/error_code_struc_applied1.pngerror_code_struc_appliedhttps://enigma0x3.net/wp-content/uploads/2017/04/return_code_in_eax.pngreturn_code_in_eaxhttps://enigma0x3.net/wp-content/uploads/2017/04/end_of_checkvalidsig.pngend_of_checkvalidsig2017-06-11T17:16:30+00:00monthlyhttps://enigma0x3.net/2017/03/17/fileless-uac-bypass-using-sdclt-exe/https://enigma0x3.net/wp-content/uploads/2017/03/execution_1.pngexecution_1https://enigma0x3.net/wp-content/uploads/2017/03/final_reg.pngfinal_reghttps://enigma0x3.net/wp-content/uploads/2017/03/reg_query_2.pngreg_query_2https://enigma0x3.net/wp-content/uploads/2017/03/reg_query.pngreg_queryhttps://enigma0x3.net/wp-content/uploads/2017/03/runas_ida.pngrunas_idahttps://enigma0x3.net/wp-content/uploads/2017/03/sxshellexecuteaselevated_call.pngsxshellexecuteaselevated_callhttps://enigma0x3.net/wp-content/uploads/2017/03/identify_arguments.pngidentify_arguments2017-03-17T12:53:36+00:00monthlyhttps://enigma0x3.net/2017/03/14/bypassing-uac-using-app-paths/https://enigma0x3.net/wp-content/uploads/2017/03/elevation.pngelevationhttps://enigma0x3.net/wp-content/uploads/2017/03/execution.pngexecutionhttps://enigma0x3.net/wp-content/uploads/2017/03/reg_mods.pngreg_modshttps://enigma0x3.net/wp-content/uploads/2017/03/app_path_query.pngapp_path_queryhttps://enigma0x3.net/wp-content/uploads/2017/03/starting_control.pngstarting_controlhttps://enigma0x3.net/wp-content/uploads/2017/03/auto_elevate.pngauto_elevate2017-03-15T01:36:10+00:00monthlyhttps://enigma0x3.net/2017/01/23/lateral-movement-via-dcom-round-2/https://enigma0x3.net/wp-content/uploads/2017/01/screen-shot-2017-01-23-at-4-13-52-pm.pngscreen-shot-2017-01-23-at-4-13-52-pmhttps://enigma0x3.net/wp-content/uploads/2017/01/screen-shot-2017-01-23-at-4-12-24-pm.pngscreen-shot-2017-01-23-at-4-12-24-pmhttps://enigma0x3.net/wp-content/uploads/2017/01/shellbrowser_classid.pngshellbrowser_classidhttps://enigma0x3.net/wp-content/uploads/2017/01/shellwindow_classid.pngshellwindow_classidhttps://enigma0x3.net/wp-content/uploads/2017/01/remote_instantiation_failure1.pngremote_instantiation_failurehttps://enigma0x3.net/wp-content/uploads/2017/01/shellexecute_returncode.pngshellexecute_returncodehttps://enigma0x3.net/wp-content/uploads/2017/01/method_params_over_wire.pngmethod_params_over_wirehttps://enigma0x3.net/wp-content/uploads/2017/01/method_enumeration.pngmethod_enumerationhttps://enigma0x3.net/wp-content/uploads/2017/01/idispatch_gettypeinfo.pngidispatch_gettypeinfohttps://enigma0x3.net/wp-content/uploads/2017/01/isystemactivator_getclassobject.pngisystemactivator_getclassobject2017-01-23T21:19:41+00:00monthlyhttps://enigma0x3.net/aboutme/2017-01-22T01:24:52+00:00weekly0.6https://enigma0x3.net/2017/01/05/lateral-movement-using-the-mmc20-application-com-object/https://enigma0x3.net/wp-content/uploads/2017/01/command1.pngcommand1https://enigma0x3.net/wp-content/uploads/2017/01/execution.pngexecutionhttps://enigma0x3.net/wp-content/uploads/2017/01/command.pngcommandhttps://enigma0x3.net/wp-content/uploads/2017/01/validate_admin_beacon.pngvalidate_admin_beaconhttps://enigma0x3.net/wp-content/uploads/2017/01/process_validation.pngprocess_validationhttps://enigma0x3.net/wp-content/uploads/2017/01/start_remote_process.pngstart_remote_processhttps://enigma0x3.net/wp-content/uploads/2017/01/remote_instantiation.pngremote_instantiationhttps://enigma0x3.net/wp-content/uploads/2017/01/executeshellcommad_method.pngexecuteshellcommad_method2017-01-06T23:50:21+00:00monthlyhttps://enigma0x3.net/2016/11/21/bypassing-application-whitelisting-by-using-rcsi-exe/https://enigma0x3.net/wp-content/uploads/2016/11/rcsi_execution.pngrcsi_executionhttps://enigma0x3.net/wp-content/uploads/2016/11/rcsi_code.pngrcsi_code2016-11-21T14:06:39+00:00monthlyhttps://enigma0x3.net/2016/11/17/bypassing-application-whitelisting-by-using-dnx-exe/https://enigma0x3.net/wp-content/uploads/2016/11/dnx_bypass.pngdnx_bypasshttps://enigma0x3.net/wp-content/uploads/2016/11/csharp_code.pngcsharp_code2016-11-17T14:43:25+00:00monthlyhttps://enigma0x3.net/2016/07/22/bypassing-uac-on-windows-10-using-disk-cleanup/https://enigma0x3.net/wp-content/uploads/2016/07/alwaysnotify.pngAlwaysNotifyhttps://enigma0x3.net/wp-content/uploads/2016/07/screen-shot-2016-07-22-at-2-47-48-pm.pngScreen Shot 2016-07-22 at 2.47.48 PMhttps://enigma0x3.net/wp-content/uploads/2016/07/elevateddllload.pngElevatedDllLoadhttps://enigma0x3.net/wp-content/uploads/2016/07/dllsloaded.pngDllsLoadedhttps://enigma0x3.net/wp-content/uploads/2016/07/dismhoststart.pngdismhostStarthttps://enigma0x3.net/wp-content/uploads/2016/07/taskelevation.pngTaskElevationhttps://enigma0x3.net/wp-content/uploads/2016/07/fileextraction.pngFileExtractionhttps://enigma0x3.net/wp-content/uploads/2016/07/foldercreation.pngFolderCreation2016-08-21T20:24:06+00:00monthlyhttps://enigma0x3.net/2016/08/15/fileless-uac-bypass-using-eventvwr-exe-and-registry-hijacking/https://enigma0x3.net/wp-content/uploads/2016/08/powershell_procexp.pngpowershell_procexphttps://enigma0x3.net/wp-content/uploads/2016/08/powershell_load.pngpowershell_loadhttps://enigma0x3.net/wp-content/uploads/2016/08/hijack_query.pnghijack_queryhttps://enigma0x3.net/wp-content/uploads/2016/08/mscfile_key_hijack.pngmscfile_key_hijackhttps://enigma0x3.net/wp-content/uploads/2016/08/registry_queries.pngregistry_querieshttps://enigma0x3.net/wp-content/uploads/2016/08/hkcr_mscfile_query.pnghkcr_mscfile_queryhttps://enigma0x3.net/wp-content/uploads/2016/08/eventvwr_manifest.pngeventvwr_manifest2016-12-31T12:48:54+00:00monthlyhttps://enigma0x3.net/2016/05/25/userland-persistence-with-scheduled-tasks-and-com-handler-hijacking/https://enigma0x3.net/wp-content/uploads/2016/05/modified_hkcr_entry1.pngmodified_hkcr_entryhttps://enigma0x3.net/wp-content/uploads/2016/05/added_hkcu_entry1.pngadded_hkcu_entryhttps://enigma0x3.net/wp-content/uploads/2016/05/persistence_locations_flag.pngpersistence_locations_flaghttps://enigma0x3.net/wp-content/uploads/2016/05/on_logon_flag.pngon_logon_flaghttps://enigma0x3.net/wp-content/uploads/2016/05/script_default.pngscript_defaulthttps://enigma0x3.net/wp-content/uploads/2016/05/dll_loaded_in_procexp.pngdll_loaded_in_procexphttps://enigma0x3.net/wp-content/uploads/2016/05/dll_popup_on_execute.pngdll_popup_on_executehttps://enigma0x3.net/wp-content/uploads/2016/05/logon_task.pnglogon_taskhttps://enigma0x3.net/wp-content/uploads/2016/05/modified_hkcr_entry.pngmodified_hkcr_entryhttps://enigma0x3.net/wp-content/uploads/2016/05/added_hkcu_entry.pngadded_hkcu_entry2016-05-26T08:48:00+00:00monthlyhttps://enigma0x3.net/2014/01/23/maintaining-access-with-normal-dotm/https://enigma0x3.net/wp-content/uploads/2014/01/weeee128608434186193999.jpgweeee128608434186193999https://enigma0x3.net/wp-content/uploads/2014/01/m8.pngm8https://enigma0x3.net/wp-content/uploads/2014/01/m7.pngm7https://enigma0x3.net/wp-content/uploads/2014/01/m6.pngm6https://enigma0x3.net/wp-content/uploads/2014/01/m5.pngm5https://enigma0x3.net/wp-content/uploads/2014/01/m4.pngm4https://enigma0x3.net/wp-content/uploads/2014/01/m2.pngm2https://enigma0x3.net/wp-content/uploads/2014/01/m1.pngm12016-03-30T12:20:30+00:00monthlyhttps://enigma0x3.net/2016/03/15/phishing-with-empire/https://enigma0x3.net/wp-content/uploads/2016/03/ole_agent.pngole_agenthttps://enigma0x3.net/wp-content/uploads/2016/03/insert_object.pnginsert_objecthttps://enigma0x3.net/wp-content/uploads/2016/03/final_ole.pngfinal_olehttps://enigma0x3.net/wp-content/uploads/2016/03/icon.pngiconhttps://enigma0x3.net/wp-content/uploads/2016/03/adding_ole.pngadding_olehttps://enigma0x3.net/wp-content/uploads/2016/03/object_insert.pngObject_inserthttps://enigma0x3.net/wp-content/uploads/2016/03/bat_generate.pngbat_generatehttps://enigma0x3.net/wp-content/uploads/2016/03/agent.pngagenthttps://enigma0x3.net/wp-content/uploads/2016/03/box.pngboxhttps://enigma0x3.net/wp-content/uploads/2016/03/host.pnghost2016-04-01T16:50:57+00:00monthlyhttps://enigma0x3.net/2016/02/29/offensive-operations-with-powersccm/https://enigma0x3.net/wp-content/uploads/2016/02/remove_collection.pngremove_collectionhttps://enigma0x3.net/wp-content/uploads/2016/02/remove-application.pngRemove-Applicationhttps://enigma0x3.net/wp-content/uploads/2016/02/deployment_cleanup.pngdeployment_cleanuphttps://enigma0x3.net/wp-content/uploads/2016/02/execution.pngexecutionhttps://enigma0x3.net/wp-content/uploads/2016/02/checkin.pngCheckinhttps://enigma0x3.net/wp-content/uploads/2016/02/deployment.pngdeploymenthttps://enigma0x3.net/wp-content/uploads/2016/02/gui.pngguihttps://enigma0x3.net/wp-content/uploads/2016/02/payload_verify.pngpayload_verifyhttps://enigma0x3.net/wp-content/uploads/2016/02/new-sccmapplication.pngNew-SCCMApplicationhttps://enigma0x3.net/wp-content/uploads/2016/02/device_add.pngdevice_add2016-04-15T13:03:38+00:00monthlyhttps://enigma0x3.net/2016/01/28/an-empire-case-study/https://enigma0x3.net/wp-content/uploads/2016/01/lab_dc_access.pnglab_dc_accesshttps://enigma0x3.net/wp-content/uploads/2016/01/final_golden_ticket.pngfinal_golden_tickethttps://enigma0x3.net/wp-content/uploads/2016/01/final_golden_ticket_setup.pngfinal_golden_ticket_setuphttps://enigma0x3.net/wp-content/uploads/2016/01/all_krbtgt.pngall_krbtgthttps://enigma0x3.net/wp-content/uploads/2016/01/lab_local_krbtgt.pnglab_local_krbtgthttps://enigma0x3.net/wp-content/uploads/2016/01/golden_ticket.pnggolden_tickethttps://enigma0x3.net/wp-content/uploads/2016/01/dev_krbtgt_credstore.pngdev_krbtgt_credstorehttps://enigma0x3.net/wp-content/uploads/2016/01/dev_krbtgt.pngdev_krbtgthttps://enigma0x3.net/wp-content/uploads/2016/01/parent_user_to_sid.pngparent_user_to_sidhttps://enigma0x3.net/wp-content/uploads/2016/01/domain_trust.pngdomain_trust2016-01-28T19:21:43+00:00monthlyhttps://enigma0x3.net/2015/10/27/targeted-workstation-compromise-with-sccm/https://enigma0x3.net/wp-content/uploads/2015/10/sccm_payload.pngsccm_payloadhttps://enigma0x3.net/wp-content/uploads/2015/10/sccm_blank_field.pngsccm_blank_fieldhttps://enigma0x3.net/wp-content/uploads/2015/10/sccm_empire_agent.pngsccm_empire_agenthttps://enigma0x3.net/wp-content/uploads/2015/10/sccm_deployment_verification.pngsccm_deployment_verificationhttps://enigma0x3.net/wp-content/uploads/2015/10/sccm_user_notifications.pngsccm_user_notificationshttps://enigma0x3.net/wp-content/uploads/2015/10/set_to_required_sccm.pngset_to_required_sccmhttps://enigma0x3.net/wp-content/uploads/2015/10/sccm_target_selection_deploy.pngsccm_target_selection_deployhttps://enigma0x3.net/wp-content/uploads/2015/10/sccm_deploy_application.pngsccm_deploy_applicationhttps://enigma0x3.net/wp-content/uploads/2015/10/sccm_install_settings.pngsccm_install_settingshttps://enigma0x3.net/wp-content/uploads/2015/10/sccm_detection_prompt.pngsccm_detection_prompt2015-10-30T17:27:02+00:00monthlyhttps://enigma0x3.net/2015/08/26/empire-tips-and-tricks/https://enigma0x3.net/wp-content/uploads/2015/08/db_listener_config.pngdb_listener_confighttps://enigma0x3.net/wp-content/uploads/2015/08/browse_db.pngbrowse_dbhttps://enigma0x3.net/wp-content/uploads/2015/08/agent_recovery.pngagent_recoveryhttps://enigma0x3.net/wp-content/uploads/2015/08/ctrl_c_quit.pngctrl_c_quithttps://enigma0x3.net/wp-content/uploads/2015/08/cred_csv.pngcred_csvhttps://enigma0x3.net/wp-content/uploads/2015/08/steal_token.pngsteal_tokenhttps://enigma0x3.net/wp-content/uploads/2015/08/pth_cred_id.pngpth_cred_idhttps://enigma0x3.net/wp-content/uploads/2015/08/cred_id_module.pngcred_id_modulehttps://enigma0x3.net/wp-content/uploads/2015/08/cred_export.pngcred_exporthttps://enigma0x3.net/wp-content/uploads/2015/08/cred_remove_set.pngcred_remove_set2015-11-27T16:38:07+00:00monthlyhttps://enigma0x3.net/2015/04/15/10-tips-for-aspiring-security-professionals/2015-12-09T19:16:06+00:00monthlyhttps://enigma0x3.net/2015/03/19/packager-shell-object-being-used-as-infection-vector/https://enigma0x3.net/wp-content/uploads/2015/03/91.png9https://enigma0x3.net/wp-content/uploads/2015/03/81.png8https://enigma0x3.net/wp-content/uploads/2015/03/72.png7https://enigma0x3.net/wp-content/uploads/2015/03/63.png6https://enigma0x3.net/wp-content/uploads/2015/03/52.png5https://enigma0x3.net/wp-content/uploads/2015/03/22.png2https://enigma0x3.net/wp-content/uploads/2015/03/13.png12015-11-15T13:44:47+00:00monthlyhttps://enigma0x3.net/2015/03/18/removing-the-password-from-malicious-vba-projects/https://enigma0x3.net/wp-content/uploads/2015/03/8.png8https://enigma0x3.net/wp-content/uploads/2015/03/62.png6https://enigma0x3.net/wp-content/uploads/2015/03/51.png5https://enigma0x3.net/wp-content/uploads/2015/03/41.png4https://enigma0x3.net/wp-content/uploads/2015/03/32.png32015-11-06T16:06:26+00:00monthlyhttps://enigma0x3.net/2015/03/05/using-alternate-data-streams-to-persist-on-a-compromised-machine/https://enigma0x3.net/wp-content/uploads/2015/03/int7.pngint7https://enigma0x3.net/wp-content/uploads/2015/03/int6.pngint6https://enigma0x3.net/wp-content/uploads/2015/03/int5.pngint5https://enigma0x3.net/wp-content/uploads/2015/03/int4.pngint4https://enigma0x3.net/wp-content/uploads/2015/03/int3.pngint3https://enigma0x3.net/wp-content/uploads/2015/03/int2.pngint2https://enigma0x3.net/wp-content/uploads/2015/03/int1.pngint1https://enigma0x3.net/wp-content/uploads/2015/03/12.png1https://enigma0x3.net/wp-content/uploads/2015/03/21.png2https://enigma0x3.net/wp-content/uploads/2015/03/11.png12015-03-19T17:33:45+00:00monthlyhttps://enigma0x3.net/2015/01/21/phishing-for-credentials-if-you-want-it-just-ask/https://enigma0x3.net/wp-content/uploads/2015/01/5555.png5555https://enigma0x3.net/wp-content/uploads/2015/01/22222.png22222https://enigma0x3.net/wp-content/uploads/2015/01/33333322.png33333322https://enigma0x3.net/wp-content/uploads/2015/01/33331.png33332015-01-27T19:47:46+00:00monthlyhttps://enigma0x3.net/2014/10/14/persistence-using-microsoft-outlook/https://enigma0x3.net/wp-content/uploads/2014/10/1.png12015-01-10T13:48:45+00:00monthlyhttps://enigma0x3.net/2014/07/16/127/https://enigma0x3.net/wp-content/uploads/2014/07/51.png5https://enigma0x3.net/wp-content/uploads/2014/07/5.png5https://enigma0x3.net/wp-content/uploads/2014/07/3.png3https://enigma0x3.net/wp-content/uploads/2014/07/2.png2https://enigma0x3.net/wp-content/uploads/2014/07/1.png12014-07-16T18:17:01+00:00monthlyhttps://enigma0x3.net/2014/06/16/abusing-powershell-profiles/https://enigma0x3.net/wp-content/uploads/2014/06/5.png5https://enigma0x3.net/wp-content/uploads/2014/06/4.png4https://enigma0x3.net/wp-content/uploads/2014/06/3.png3https://enigma0x3.net/wp-content/uploads/2014/06/2.png2https://enigma0x3.net/wp-content/uploads/2014/06/1.png12014-06-21T17:20:28+00:00monthlyhttps://enigma0x3.net/2014/03/18/vba-powershell-malware/https://enigma0x3.net/wp-content/uploads/2014/03/screenshot_13.pngScreenshot_13https://enigma0x3.net/wp-content/uploads/2014/03/screenshot_12.pngScreenshot_12https://enigma0x3.net/wp-content/uploads/2014/03/screenshot_11.pngScreenshot_11https://enigma0x3.net/wp-content/uploads/2014/03/screenshot_10.pngScreenshot_10https://enigma0x3.net/wp-content/uploads/2014/03/screenshot_9.pngScreenshot_9https://enigma0x3.net/wp-content/uploads/2014/03/screenshot_8.pngScreenshot_8https://enigma0x3.net/wp-content/uploads/2014/03/screenshot_7.pngScreenshot_7https://enigma0x3.net/wp-content/uploads/2014/03/screenshot_6.pngScreenshot_62014-10-28T23:26:19+00:00monthlyhttps://enigma0x3.net/2014/01/22/using-office-macros-for/https://enigma0x3.net/wp-content/uploads/2014/01/baseline.pngbaseline2014-02-06T03:54:38+00:00monthlyhttps://enigma0x3.net/2014/01/17/command-and-control-using-powershell-and-your-favorite-website/https://enigma0x3.net/wp-content/uploads/2014/01/6.png6https://enigma0x3.net/wp-content/uploads/2014/01/5.png5https://enigma0x3.net/wp-content/uploads/2014/01/4.png4https://enigma0x3.net/wp-content/uploads/2014/01/3.png3https://enigma0x3.net/wp-content/uploads/2014/01/2.png2https://enigma0x3.net/wp-content/uploads/2014/01/1.png12014-11-15T23:14:19+00:00monthlyhttps://enigma0x3.net/2014/01/15/new-feature-added-to-powershell-payload-excel-delivery/2014-01-15T13:21:01+00:00monthlyhttps://enigma0x3.net/2014/01/11/using-a-powershell-payload-in-a-client-side-attack/https://enigma0x3.net/wp-content/uploads/2014/01/persist.pngpersisthttps://enigma0x3.net/wp-content/uploads/2014/01/step3.pngshellhttps://enigma0x3.net/wp-content/uploads/2014/01/step2.pngwarninghttps://enigma0x3.net/wp-content/uploads/2014/01/step1.pngMacro2014-05-29T15:36:17+00:00monthlyhttps://enigma0x3.netdaily1.02023-10-26T16:56:34+00:00