482 matches found
UltimateWDACBypassList
Ultimate WDAC Bypass List A centralized resource for previously documented WDAC/Device Guard/UMCI bypass techniques as well for building/managing/testing WDAC policies Note: WDAC Windows Defender Application Control has been rebranded by Microsoft as "Application Control" or "Application Control...
Digital-Signature-Hijack
数字签名劫持 劫持合法数字签名是一种可在红队评估中使用的技术，用于对 PowerShell 代码和二进制文件进行签名。这有助于绕过 Device Guard 限制，并在参与过程中保持隐蔽。DigitalSignatureHijack 是一个基于 Matt Graeber 研究的 PowerShell 脚本，可以执行以下操作： 对主机上的所有可移植可执行文件（PE）进行数字签名，署名 Microsoft 对主机上的所有 PowerShell 脚本进行数字签名，署名 Microsoft 验证所有可移植可执行文件的数字签名 验证所有 PowerShell 脚本的数字签名...
EUVD-2026-3111
Microsoft Edge Elevation Service exposes a privileged COM interface that inadequately validates the privileges of the calling process. A standard non‑administrator local user can invoke the IElevatorEdge interface method LaunchUpdateCmdElevatedAndWait, causing the service to execute privileged...
CVE-2026-21223
Improper privilege management in Microsoft Edge Chromium-based allows an authorized attacker to bypass a security feature locally...
EUVD-2018-19885
Malware in sbrugna...
EUVD-2017-0540
Malware in sbrugna...
EUVD-2018-19884
Malware in sbrugna...
EUVD-2018-19890
Malware in sbrugna...
EUVD-2018-19886
Malware in sbrugna...
EUVD-2018-1745
Malware in sbrugna...
EUVD-2017-0584
Malware in sbrugna...
EUVD-2017-0582
Malware in sbrugna...
EUVD-2018-1632
Malware in sbrugna...
EUVD-2017-17692
Malware in sbrugna...
EUVD-2018-20053
Malware in sbrugna...
EUVD-2017-17661
Malware in sbrugna...
EUVD-2017-12870
Malware in sbrugna...
EUVD-2018-1654
Malware in sbrugna...