Malware & C2 Living-off-the-Land Binaries (LOLBins) for Evasion
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
LOLBAS
Malware & C2 
Windows Privesc Application Control with AppLocker and WDAC: Design and Gaps
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Malware & C2 Abusing BITS Jobs for Download and Persistence
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Security Living off the Land: Abusing LOLBAS Binaries on Windows
How attackers abuse certutil, bitsadmin, mshta, regsvr32 and rundll32 to download, execute and evade — plus blue-team detection.