Death By a Thousand Papercuts

mobility-print.exe loading files from the PATH variable
POC bat file that spawns calc.exe
Calc.exe spawned as SYSTEM

--

--

--

Red Teamer — Security Researcher — Breaking things is fun, except when its not

Love podcasts or audiobooks? Learn on the go with our new app.

Recommended from Medium

How to stay secure for longer? Software development case.

What happens when you enter an URL into your browser.

New Cryptocurrency Mining Virus Spreads Through Facebook

Analyzing SSL Handshake Logs

DOGECOIN Will be Available on CoinTiger on 14 December 474,000,000,000 DOGECOIN to Give Away!

SSD’s Security Disclosure weekly news recap — March 25, 2021

Biggest scam which is going on using Indian Army # Day21

IT’S TIME TO CLAIM FRIENDSTER BOUNTY!

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store
Chris Hernandez

Chris Hernandez

Red Teamer — Security Researcher — Breaking things is fun, except when its not

More from Medium

Find the Articulation Point

Understanding JVM Arguments

4. Methods use instance variables

Log4j vulnerability