search

sensepost / USaBUSe

Universal Serial aBUSe is a project to demonstrate the risks of hardware bypasses of software security by Rogan Dawes at SensePost.
Other
493 stars 86 forks source link

Run PowerShell with rundll32. Bypass software restrictions. #10

Closed wopot closed 8 years ago

wopot commented 8 years ago

have a look at https://github.com/p3nt4/PowerShdll

you do not have to access to powershell.exe (what is mostly monitored)

RoganDawes commented 8 years ago

This seems to require additional software to be copied onto the victim, which is contrary to the objective of minimising the forensic footprint.

Have I misunderstood?