Indirect Command Execution – Penetration Testing Lab

The windows ecosystem provides multiple binaries that could be used by adversaries to execute arbitrary commands that will evade detection especially in environments that are monitoring binaries such as "cmd.exe". In certain occasions the techniques described below could be used to bypass application whitelisting products if rules are not configured properly (whitelist by path or…

Windows Print Spooler RCE Vulnerabilities (CVE-2021-1675/CVE-2021-34527) Mitigation Guide - NSFOCUS, Inc., a global network and cyber security leader, protects enterprises and carriers from advanced cyber attacks.

PentesterLab: Learn Web App Pentesting!

command execution walkthrough – Penetration Testing Lab

OWASP LLM02: Insecure Output Handling

Coercing NTLM Authentication from SCCM, by Chris Thompson

Indirect Command Execution: Defense Evasion (T1202) - Hacking Articles

Low cost 3D printing of metals using filled polymer pellets - ScienceDirect

Indirect Command Execution: Defense Evasion (T1202) - Hacking Articles

Linux Hacking Case Studies Part 3: phpMyAdmin

Indirect Command Execution: Defense Evasion (T1202) - Hacking Articles

Writing Exploits for Win32 Systems from Scratch, NCC Group Research Blog

Information disclosure vulnerabilities

TryHackMe Hacktivities

Indirect Command Execution – Penetration Testing Lab

Indirect Command Execution: Defense Evasion (T1202) - Hacking Articles