this post was submitted on 13 May 2024
1 points (100.0% liked)

Technical Information Security Content & Discussion

8 readers
1 users here now

/r/netsec is a community-curated aggregator of technical information security content. Our mission is to extract signal from the noise — to...

founded 1 year ago
MODERATORS
[email protected]
1
cybersectroll/SharpPersistSD (github.com)
submitted 6 months ago by [email protected] to c/[email protected]
0 comments fedilink hide all child comments
 
The original post: /r/netsec by /u/cybersectroll on 2024-05-13 19:08:03.

A Post-Compromise granular, fully reflective, simple and convenient .NET library to embed persistency to persistency by abusing Security Descriptors of remote machines. The techniques incorporated are not novel but I've yet to come across any documented approach of modifying SCM/Service's SDDL by directly modifying registry keys. Modification of SD for WMI and Remote registry was also added in as an after thought but this means there's a lot more to explore and add for the curious minds.

no comments (yet)
sorted by: hot top controversial new old
there doesn't seem to be anything here