How to Evade Application Whitelisting Using REGSVR32 - Black Hills

Joff Thyer // I was recently working on a Red Team for a customer that was very much up to date with their defenses. This customer had tight egress controls, […]

Bypassing Application Whitelisting with runscripthelper.exe, by Matt Graeber

Bypassing Application Whitelisting with runscripthelper.exe, by Matt Graeber

Babushka Dolls or How To Bypass Application Whitelisting and Constrained Powershell — Improsec

Powershell Constrained Language Mode Bypass - Red Team Notes

Babushka Dolls or How To Bypass Application Whitelisting and Constrained Powershell — Improsec

How to Bypass Application Whitelisting & AV - Black Hills Information Security

How to create an Application Whitelist Policy in Windows

How to Evade Application Whitelisting Using REGSVR32 - Black Hills Information Security

Powershell Without Powershell - How To Bypass Application Whitelisting, Environment Restrictions & AV - Black Hills Information Security

Abusing Catalog Hygiene to Bypass Application Whitelisting – bohops

Babushka Dolls or How To Bypass Application Whitelisting and Constrained Powershell — Improsec

Windows Exploitation: regsvr32 - Hacking Articles

How to Bypass Application Whitelisting & AV - Black Hills Information Security