hijacking Cmd Hijack - a command/argument confusion with path traversal in cmd.exe This one is about an interesting behavior 🤠I identified in cmd.exe in result of many weeks of intermittent (private time, every now and then) research in pursuit of some new OS Command Injection attack vectors. So I was mostly trying to: find an
windows PE Import Table hijacking as a way of achieving persistence - or exploiting DLL side loading PrefaceIn this post I describe a simple trick I came up with recently - something which is definitely nothing new, but as I found it useful and haven't seen it elsewhere, I decided to write it up. What we want to achieveSo - let's