Upgrade to Pro — share decks privately, control downloads, hide ads and more …
Sign up for free

Sneaking Past Device Guard

Avatar for Philip Philip
March 20, 2019
Research
73
0

Sneaking Past Device Guard

Avatar for Philip

Philip

March 20, 2019

Other Decks in Research

See All in Research
JICA QUEST 共創×革新プログラム Impact Report（海ノ向こうコーヒー）
Avatar for 坂ノ途中 ontheslope
0
840
MIRU2026 チュートリアル講演2：三次元データ処理の動向
Avatar for Naoya Chiba nnchiba
8
5.4k
CDCL を用いた MILP の厳密解法
Avatar for 今井義弥 imai448
0
300
最先端NLP勉強会2026 論文紹介：Reasoning with Sampling: Your Base Model is Smarter Than You Think (ICLR 2026 paper)
Avatar for Kogoro kogoro
4
710
2026年 オープンキャンパス 研究室紹介
Avatar for Jun Kurihara junkurihara
0
250
ふとした出会いで生まれたSkillが、 社内利用1位になるまで
Avatar for earlgrayMK mikimhk
22
25k
VLMの推論を高速化する視覚トークン削減の仕組み
Avatar for tattaka tattaka
2
380
2025年度秋葉原ウォーカブルプロジェクト調査報告 「アキバらしいウォーカブル」とは何か
Avatar for 日本大学 都市計画研究室（泉山ゼミ） izumiyama_lab
1
250
COMETAを用いたデータ民主化運動の歴史
Avatar for Kazuya Mori sazimai
0
290
ICAITD 2026 Oral Presentation
Avatar for Rikka Botan rikkabotan7
0
110
Evaluating LLM Reliability Across Facts, Evidence, and Cultures
Avatar for Yuki Arase yukiar
0
210
就労支援の現場での生成AI活用
Avatar for 榎本大貴 enochan
0
150

Featured

See All Featured
Docker and Python
Avatar for Tania Allard trallard
47
4.2k
Put a Button on it: Removing Barriers to Going Fast.
Avatar for kastner kastner
60
4.6k
Getting science done with accelerated Python computing platforms
Avatar for Jacob Tomlinson jacobtomlinson
2
540
SEO in 2025: How to Prepare for the Future of Search
Avatar for Michael King ipullrank
3
3.9k
エンジニアに許された特別な時間の終わり
Avatar for watany watany
109
250k
Have SEOs Ruined the Internet? - User Awareness of SEO in 2025
Avatar for Akash Hashmi akashhashmi
0
520
How Software Deployment tools have changed in the past 20 years
Avatar for Geshan Manandhar geshan
2
35k
Noah Learner - AI + Me: how we built a GSC Bulk Export data pipeline
Avatar for Tech SEO Connect techseoconnect
PRO
0
460
First, design no harm
Avatar for Per Axbom axbom
PRO
2
1.3k
Introduction to Domain-Driven Design and Collaborative software design
Avatar for Kenny Baas-Schwegler baasie
1
1k
BBQ
Avatar for Matthew Crist matthewcrist
90
10k
Exploring the Power of Turbo Streams & Action Cable | RailsConf2023
Avatar for Kevin Liebholz kevinliebholz
37
6.6k

Transcript

  1. None
  2. None
  3. None
  4. None
  5. None
  6. None

  7. Allocate and jump to code Execute arbitrary Win32API/Syscalls

  8. None
  9. None

  10. Fully Controlled Process Privilege Escalation Lateral Movement Sandbox Escape Persistence

  11. None
  12. None
  13. None
  14. None
  15. None
  16. None
  17. None
  18. None
  19. None
  20. None
  21. None
  22. None
  23. None
  24. None
  25. None

  26. ツ

  27. None
  28. None
  29. None
  30. None
  31. None
  32. None
  33. None
  34. None
  35. None
  36. None
  37. None

  38. https://docs.microsoft.com

  39. None

  40. Engine Wldp.dll Host Engine Script new ActiveXObject (“Wscript.Shell”); CLSIDFromProgID (“Wscript.Shell”,

    &clsid) Host->IsClassAllowed (clsid, &is_allowed) WldpIsClassInApprovedList (classID, hostInformation, isApproved, optionalFlags) CoCreateInstance (clsid, *otherparams)
  41. None
  42. None
  43. None
  44. None
  45. None
  46. None

  47. Modification of a method published here: https://enigma0x3.net/2017/11/16/lateral-movement-using-outlooks-createobject-method-and-dotnettojscript/

  48. Engine Wldp.dll Host Engine Script new ActiveXObject (“Wscript.Shell”); CLSIDFromProgID (“Wscript.Shell”,

    &clsid) Host->IsClassAllowed (clsid, &is_allowed) WldpIsClassInApprovedList (classID, hostInformation, isApproved, optionalFlags) CoCreateInstance (clsid, *otherparams)
  49. None
  50. None
  51. None
  52. None
  53. None
  54. None
  55. None
  56. None
  57. None
  58. None
  59. None
  60. None
  61. None
  62. None
  63. None
  64. None
  65. None
  66. None