Grzegorz Tworek's banner
Grzegorz Tworek's profile picture

Grzegorz Tworek

@0gtweet • 38,132 subscribers

My own research, unless stated otherwise. Not necessarily "safe when taken as directed". GIT d- s+: a+ C++++ !U !L !M w++++$ b++++ G-

Videos

LIVE
1.2k

Anya Rossi

sweetdream.ai

SweetDream.aiSponsored•Livecam
Streaming Now

Watch Anya Live

Anya is streaming live right now! Join her private show and enjoy exclusive content.

HD live stream
Exclusive private shows
1.2k viewers online

Free preview available • Premium content

Fancy Defender evasion? Yet another method, nearly bare hands: 1. Export CurrentControlSet to a file 2. Edit path in a file 3. Import a file as new ControlSet 4. Change "Select" values to new one 5. Reboot 6. Enjoy 😎 A side effect of my "Registry internals" session yesterday 😅
2:08
0gtweet's profile picture

Fancy Defender evasion? Yet another method, nearly bare hands: 1. Export CurrentControlSet to a file 2. Edit path in a file 3. Import a file as new ControlSet 4. Change "Select" values to new one 5. Reboot 6. Enjoy 😎 A side effect of my "Registry internals" session yesterday 😅

Grzegorz Tworek

74,059 Aufrufe • vor 2 Jahren

Netsh.exe relies on extensions taken from Registry, which means it may be used as a persistence. And what, if you go one step further, extending netsh with a DLL allowing you to do whatever you want? Kinda #LOLBin 😎 Enjoy the C code and DLL, as usual:
0:23
0gtweet's profile picture

Netsh.exe relies on extensions taken from Registry, which means it may be used as a persistence. And what, if you go one step further, extending netsh with a DLL allowing you to do whatever you want? Kinda #LOLBin 😎 Enjoy the C code and DLL, as usual:

Grzegorz Tworek

71,747 Aufrufe • vor 3 Jahren

Keine weiteren Inhalte verfügbar