Tag
#privilege-escalation
RogueProvision: Windows Privilege Escalation in the Provisioning Engine — the SYSTEM Task That Applies Unsigned Packages
A SYSTEM service applies unsigned .ppkg packages from a folder — no signature, no consent. Microsoft's docs promise otherwise. Honest catch: admin→SYSTEM.
Inside NOFILTER-NFEXEC: A Deep Dive into WFP Implementation and BOF OPSEC Engineering
Implementing the DEF CON 31 NoFilter technique as an OPSEC-hardened Havoc C2 BOF — indirect syscalls, return address spoofing, and AMSI/ETW bypass.