https://bohops.com/2023/11/27/abusing-net-core-clr-diagnostic-features-cve-2023-33127/https://bohops.com/wp-content/uploads/2023/11/image-14.pngimage-14https://bohops.com/wp-content/uploads/2023/11/image-13.pngimage-13https://bohops.com/wp-content/uploads/2023/11/image-12.pngimage-12https://bohops.com/wp-content/uploads/2023/11/image-11.pngimage-11https://bohops.com/wp-content/uploads/2023/11/image-10.pngimage-10https://bohops.com/wp-content/uploads/2023/11/image-9.pngimage-9https://bohops.com/wp-content/uploads/2023/11/image-8.pngimage-8https://bohops.com/wp-content/uploads/2023/11/image-7.pngimage-7https://bohops.com/wp-content/uploads/2023/11/image-6.pngimage-6https://bohops.com/wp-content/uploads/2023/11/image-5.pngimage-52023-11-27T13:14:45+00:00monthlyhttps://bohops.com/2023/06/09/no-alloc-no-problem-leveraging-program-entry-points-for-process-injection/https://bohops.com/wp-content/uploads/2023/06/image-20.pngimage-20https://bohops.com/wp-content/uploads/2023/06/image-19.pngimage-19https://bohops.com/wp-content/uploads/2023/06/image-18.pngimage-18https://bohops.com/wp-content/uploads/2023/06/image-17.pngimage-17https://bohops.com/wp-content/uploads/2023/06/image-16.pngimage-16https://bohops.com/wp-content/uploads/2023/06/image-15.pngimage-15https://bohops.com/wp-content/uploads/2023/06/image-14.pngimage-14https://bohops.com/wp-content/uploads/2023/06/image-13.pngimage-13https://bohops.com/wp-content/uploads/2023/06/image-12.pngimage-12https://bohops.com/wp-content/uploads/2023/06/image-11.pngimage-112023-06-09T00:53:46+00:00monthlyhttps://bohops.com/2017/12/02/trust-direction-an-enabler-for-active-directory-enumeration-and-trust-exploitation/https://bohops.com/wp-content/uploads/2017/12/uc2_51.pnguc2_5https://bohops.com/wp-content/uploads/2017/12/uc2_41.pnguc2_4https://bohops.com/wp-content/uploads/2017/12/uc2_31.pnguc2_3https://bohops.com/wp-content/uploads/2017/12/uc2_21.pnguc2_2https://bohops.com/wp-content/uploads/2017/12/uc2_11.pnguc2_1https://bohops.com/wp-content/uploads/2017/12/uc1_51.pnguc1_5https://bohops.com/wp-content/uploads/2017/12/uc1_41.pnguc1_4https://bohops.com/wp-content/uploads/2017/12/uc1_31.pnguc1_3https://bohops.com/wp-content/uploads/2017/12/uc1_21.pnguc1_2https://bohops.com/wp-content/uploads/2017/12/uc1_11.pnguc1_12022-12-15T12:17:30+00:00monthlyhttps://bohops.com/2017/12/02/clickonce-twice-or-thrice-a-technique-for-social-engineering-and-untrusted-command-execution/https://bohops.com/wp-content/uploads/2017/12/win10_07.pngWin10_07https://bohops.com/wp-content/uploads/2017/12/win10_06.pngWin10_06https://bohops.com/wp-content/uploads/2017/12/win10_05.pngWin10_05https://bohops.com/wp-content/uploads/2017/12/win10_04.pngWin10_04https://bohops.com/wp-content/uploads/2017/12/win10_03.pngWin10_03https://bohops.com/wp-content/uploads/2017/12/win10_02.pngWin10_02https://bohops.com/wp-content/uploads/2017/12/win10_01.pngWin10_01https://bohops.com/wp-content/uploads/2017/12/win7_05.pngwin7_05https://bohops.com/wp-content/uploads/2017/12/win7_04.pngwin7_04https://bohops.com/wp-content/uploads/2017/12/win7_03.pngwin7_032022-12-15T12:15:24+00:00monthlyhttps://bohops.com/2018/01/07/executing-commands-and-bypassing-applocker-with-powershell-diagnostic-scripts/https://bohops.com/wp-content/uploads/2018/01/bypass_applocker.pngbypass_applockerhttps://bohops.com/wp-content/uploads/2018/01/ps2_load_assembly.pngps2_load_assemblyhttps://bohops.com/wp-content/uploads/2018/01/ps5_cl_prevention.pngps5_cl_preventionhttps://bohops.com/wp-content/uploads/2018/01/applocker_policy_psv2.pngapplocker_policy_psv2https://bohops.com/wp-content/uploads/2018/01/applocker_policy.pngapplocker_policyhttps://bohops.com/wp-content/uploads/2018/01/funrun.pngfunrunhttps://bohops.com/wp-content/uploads/2018/01/subtee_tweet.pngsubtee_tweethttps://bohops.com/wp-content/uploads/2018/01/cl_invocation.jpgcl_invocation2022-12-15T12:13:48+00:00monthlyhttps://bohops.com/2018/01/23/loading-alternate-data-stream-ads-dll-cpl-binaries-to-bypass-applocker/https://bohops.com/wp-content/uploads/2018/01/cpl_success.pngcpl_successhttps://bohops.com/wp-content/uploads/2018/01/cpl_failed_to_run.pngcpl_failed_to_runhttps://bohops.com/wp-content/uploads/2018/01/create_cpl_task.pngcreate_cpl_taskhttps://bohops.com/wp-content/uploads/2018/01/visual_studio.pngvisual_studiohttps://bohops.com/wp-content/uploads/2018/01/control_strings.pngcontrol_stringshttps://bohops.com/wp-content/uploads/2018/01/hexacorn_cpl.pnghexacorn_cplhttps://bohops.com/wp-content/uploads/2018/01/create_file1.pngcreate_filehttps://bohops.com/wp-content/uploads/2018/01/control_dll_bypass.jpgcontrol_dll_bypasshttps://bohops.com/wp-content/uploads/2018/01/applocker_image.pngapplocker_imagehttps://bohops.com/wp-content/uploads/2018/01/windows_permissions.pngwindows_permissions2022-12-15T12:10:52+00:00monthlyhttps://bohops.com/2018/01/31/vsto-the-payload-installer-that-probably-defeats-your-application-whitelisting-rules/https://bohops.com/wp-content/uploads/2018/01/vsto_7_publish_settings1.pngvsto_7_publish_settingshttps://bohops.com/wp-content/uploads/2018/01/vsto_9_compiled_released1.pngvsto_9_compiled_releasedhttps://bohops.com/wp-content/uploads/2018/01/vsto_3_add_payload1.pngvsto_3_add_payloadhttps://bohops.com/wp-content/uploads/2018/01/vsto_12_opening_word.pngvsto_12_opening_wordhttps://bohops.com/wp-content/uploads/2018/01/vsto_11_running_on_target.pngvsto_11_running_on_targethttps://bohops.com/wp-content/uploads/2018/01/vsto_10_applocker_enforcement.pngvsto_10_applocker_enforcementhttps://bohops.com/wp-content/uploads/2018/01/vsto_5_sign_manifest_for_install.pngvsto_5_sign_manifest_for_installhttps://bohops.com/wp-content/uploads/2018/01/vsto_4_open_project_properties.pngvsto_4_open_project_propertieshttps://bohops.com/wp-content/uploads/2018/01/vsto_1_create_project.pngvsto_1_create_project2022-12-15T12:09:12+00:00monthlyhttps://bohops.com/2018/02/10/vshadow-abusing-the-volume-shadow-service-for-evasion-persistence-and-active-directory-database-extraction/https://bohops.com/wp-content/uploads/2018/02/middle-earth-shadow-of-mordor.jpgMiddle-earth-Shadow-of-Mordorhttps://bohops.com/wp-content/uploads/2018/02/secretsdump.pngsecretsdumphttps://bohops.com/wp-content/uploads/2018/02/vshadow_delete.pngvshadow_deletehttps://bohops.com/wp-content/uploads/2018/02/dir_files.pngdir_fileshttps://bohops.com/wp-content/uploads/2018/02/reg_save.pngreg_savehttps://bohops.com/wp-content/uploads/2018/02/copy_ntds.pngcopy_ntdshttps://bohops.com/wp-content/uploads/2018/02/vshadow_create_persistent_snapshot.pngvshadow_create_persistent_snapshothttps://bohops.com/wp-content/uploads/2018/02/autoruns_highlighted.pngautoruns_highlightedhttps://bohops.com/wp-content/uploads/2018/02/autoruns_windows_filter.pngautoruns_windows_filterhttps://bohops.com/wp-content/uploads/2018/02/autoruns_microsoft_filter.pngautoruns_microsoft_filter2022-12-15T12:06:03+00:00monthlyhttps://bohops.com/2018/02/26/leveraging-inf-sct-fetch-execute-techniques-for-bypass-evasion-persistence/https://bohops.com/wp-content/uploads/2018/02/notsct1.pngnotscthttps://bohops.com/wp-content/uploads/2018/02/notsct.pngnotscthttps://bohops.com/wp-content/uploads/2018/02/get_request.pngget_requesthttps://bohops.com/wp-content/uploads/2018/02/cmstp_autoruns2.pngcmstp_autoruns2https://bohops.com/wp-content/uploads/2018/02/cmstp_autoruns1.pngcmstp_autoruns1https://bohops.com/wp-content/uploads/2018/02/launchinfsectionmalware21.pngLaunchInfSectionMalware2https://bohops.com/wp-content/uploads/2018/02/launchinfsectionmalware1.pngLaunchInfSectionMalwarehttps://bohops.com/wp-content/uploads/2018/02/launchinfsectionmalware2.pngLaunchInfSectionMalware2https://bohops.com/wp-content/uploads/2018/02/launchinfsection3.pngLaunchInfSection3https://bohops.com/wp-content/uploads/2018/02/launchinfsection2.pngLaunchInfSection22022-12-15T12:04:04+00:00monthlyhttps://bohops.com/2018/03/10/leveraging-inf-sct-fetch-execute-techniques-for-bypass-evasion-persistence-part-2/https://bohops.com/wp-content/uploads/2018/03/successfulrunkey.pngsuccessfulrunkeyhttps://bohops.com/wp-content/uploads/2018/03/autoruns_nofilter.pngautoruns_nofilterhttps://bohops.com/wp-content/uploads/2018/03/runkeypersist.pngrunkeypersisthttps://bohops.com/wp-content/uploads/2018/03/12_autoruns_no_filter1.png12_autoruns_no_filterhttps://bohops.com/wp-content/uploads/2018/03/7_found_a_blog_to_invoke1.png7_Found_a_blog_to_invokehttps://bohops.com/wp-content/uploads/2018/03/2_static_inf_ieunit1.png2_static_inf_ieunithttps://bohops.com/wp-content/uploads/2018/03/iexpress2.jpgiexpress2https://bohops.com/wp-content/uploads/2018/03/infdefaultinstall_strings.pnginfdefaultinstall_stringshttps://bohops.com/wp-content/uploads/2018/03/infdefaultinstall_execute.pnginfdefaultinstall_executehttps://bohops.com/wp-content/uploads/2018/03/iexpress.pngiexpress2022-12-15T12:02:32+00:00monthlyhttps://bohops.com/2018/03/17/abusing-exported-functions-and-exposed-dcom-interfaces-for-pass-thru-command-execution-and-lateral-movement/https://bohops.com/wp-content/uploads/2018/03/10_shdocvw.png10_shdocvwhttps://bohops.com/wp-content/uploads/2018/03/09_shdocvw.png09_shdocvwhttps://bohops.com/wp-content/uploads/2018/03/08_shdocvw1.png08_shdocvwhttps://bohops.com/wp-content/uploads/2018/03/07_shdocvw.png07_shdocvwhttps://bohops.com/wp-content/uploads/2018/03/06_shdocvw.png06_shdocvwhttps://bohops.com/wp-content/uploads/2018/03/05_shdocvw.png05_shdocvwhttps://bohops.com/wp-content/uploads/2018/03/04_shdocvw.png04_shdocvwhttps://bohops.com/wp-content/uploads/2018/03/03_shdocvw.png03_shdocvwhttps://bohops.com/wp-content/uploads/2018/03/02_shdocvw.jpg02_shdocvwhttps://bohops.com/wp-content/uploads/2018/03/01_shdocvw.png01_shdocvw2022-12-15T12:00:50+00:00monthlyhttps://bohops.com/2018/03/26/diskshadow-the-return-of-vss-evasion-persistence-and-active-directory-database-extraction/https://bohops.com/wp-content/uploads/2018/03/07_hashes.png07_hasheshttps://bohops.com/wp-content/uploads/2018/03/06_reg_save.png06_reg_savehttps://bohops.com/wp-content/uploads/2018/03/05_ad_extract.png05_ad_extracthttps://bohops.com/wp-content/uploads/2018/03/diskshadow_ioc_03_runkeys_autoruns_nofilter1.pngdiskshadow_ioc_03_runkeys_autoruns_nofilterhttps://bohops.com/wp-content/uploads/2018/03/diskshadow_ioc_02_task_sched_autoruns.pngdiskshadow_ioc_02_task_sched_autorunshttps://bohops.com/wp-content/uploads/2018/03/diskshadow_ioc_03_runkeys_autoruns_nofilter.pngdiskshadow_ioc_03_runkeys_autoruns_nofilterhttps://bohops.com/wp-content/uploads/2018/03/diskshadow_ioc_03_runkeys_autoruns.pngdiskshadow_ioc_03_runkeys_autorunshttps://bohops.com/wp-content/uploads/2018/03/diskshadow_ioc_01_child_proc.pngdiskshadow_ioc_01_child_prochttps://bohops.com/wp-content/uploads/2018/03/04_diskshadow_persistence.png04_diskshadow_persistencehttps://bohops.com/wp-content/uploads/2018/03/03_diskshadow_script_mode.png03_diskshadow_script_mode2022-12-15T11:59:15+00:00monthlyhttps://bohops.com/2018/04/28/abusing-dcom-for-yet-another-lateral-movement-technique/https://bohops.com/wp-content/uploads/2018/04/dcom_11.pngdcom_11https://bohops.com/wp-content/uploads/2018/04/dcom_10.pngdcom_10https://bohops.com/wp-content/uploads/2018/04/dcom_09.pngdcom_09https://bohops.com/wp-content/uploads/2018/04/dcom_08.pngdcom_08https://bohops.com/wp-content/uploads/2018/04/dcom_07.pngdcom_07https://bohops.com/wp-content/uploads/2018/04/dcom_06.pngdcom_06https://bohops.com/wp-content/uploads/2018/04/dcom_05.pngdcom_05https://bohops.com/wp-content/uploads/2018/04/dcom_041.pngdcom_04https://bohops.com/wp-content/uploads/2018/04/dcom_03.pngdcom_03https://bohops.com/wp-content/uploads/2018/04/dcom_02.pngdcom_022022-12-15T11:56:24+00:00monthlyhttps://bohops.com/2018/06/28/abusing-com-registry-structure-clsid-localserver32-inprocserver32/https://bohops.com/wp-content/uploads/2018/06/progid_rundll32.pngprogid_rundll32https://bohops.com/wp-content/uploads/2018/06/rundll32_sta.pngrundll32_stahttps://bohops.com/wp-content/uploads/2018/06/reg_import.pngreg_importhttps://bohops.com/wp-content/uploads/2018/06/vmnet_dll.pngvmnet_dllhttps://bohops.com/wp-content/uploads/2018/06/vmnet_dir1.pngvmnet_dirhttps://bohops.com/wp-content/uploads/2018/06/clsid_sta.pngclsid_stahttps://bohops.com/wp-content/uploads/2018/06/vmware_clsid.pngvmware_clsidhttps://bohops.com/wp-content/uploads/2018/06/vmware_dll.pngvmware_dllhttps://bohops.com/wp-content/uploads/2018/06/vmware_acl.pngvmware_aclhttps://bohops.com/wp-content/uploads/2018/06/inprocserver32_02.pnginprocserver32_022022-12-15T11:52:49+00:00monthlyhttps://bohops.com/2018/08/04/capturing-netntlm-hashes-with-office-dot-xml-documents/https://bohops.com/wp-content/uploads/2018/08/email.pngemailhttps://bohops.com/wp-content/uploads/2018/08/phish_3.pngphish_3https://bohops.com/wp-content/uploads/2018/08/phish_1.pngphish_1https://bohops.com/wp-content/uploads/2018/08/11_captured_nethash.png11_captured_nethashhttps://bohops.com/wp-content/uploads/2018/08/10_word_loading_xsl.png10_word_loading_xslhttps://bohops.com/wp-content/uploads/2018/08/07_open_word.png07_open_wordhttps://bohops.com/wp-content/uploads/2018/08/06_smb_server_setup.png06_smb_server_setuphttps://bohops.com/wp-content/uploads/2018/08/04_xml_with_xsl_href.png04_xml_with_xsl_hrefhttps://bohops.com/wp-content/uploads/2018/08/saved_doc.pngsaved_dochttps://bohops.com/wp-content/uploads/2018/08/09_first_time_open_office_xml_handler.png09_first_time_open_office_xml_handler2022-12-15T11:49:56+00:00monthlyhttps://bohops.com/2018/08/18/abusing-the-com-registry-structure-part-2-loading-techniques-for-evasion-and-persistence/https://bohops.com/wp-content/uploads/2018/08/verclsid.pngverclsidhttps://bohops.com/wp-content/uploads/2018/08/treataspersistence.pngtreataspersistencehttps://bohops.com/wp-content/uploads/2018/08/autoruns_rundll32.pngautoruns_rundll32https://bohops.com/wp-content/uploads/2018/08/autoruns_mmc_logon.pngautoruns_mmc_logonhttps://bohops.com/wp-content/uploads/2018/08/autoruns_mmc_no_filters.pngautoruns_mmc_no_filtershttps://bohops.com/wp-content/uploads/2018/08/autoruns_mmc_filters.pngautoruns_mmc_filtershttps://bohops.com/wp-content/uploads/2018/08/mmc_embedding.pngmmc_embeddinghttps://bohops.com/wp-content/uploads/2018/08/clsid_reg_treatas.pngclsid_reg_treatashttps://bohops.com/wp-content/uploads/2018/07/hta_clsid1.pnghta_clsid1https://bohops.com/wp-content/uploads/2018/07/clsid_desktop_ini_launch.pngclsid_desktop_ini_launch2022-12-15T11:46:57+00:00monthlyhttps://bohops.com/2019/01/10/com-xsl-transformation-bypassing-microsoft-application-control-solutions-cve-2018-8492/https://bohops.com/wp-content/uploads/2019/01/network.pngnetworkhttps://bohops.com/wp-content/uploads/2019/01/xmldom10_object_members.pngxmldom10_object_membershttps://bohops.com/wp-content/uploads/2019/01/wsh_script_success_jscript.pngwsh_script_success_jscripthttps://bohops.com/wp-content/uploads/2019/01/wmic.pngwmichttps://bohops.com/wp-content/uploads/2019/01/winrm.pngwinrmhttps://bohops.com/wp-content/uploads/2019/01/wdac_3077_error.pngwdac_3077_errorhttps://bohops.com/wp-content/uploads/2019/01/test_xsl_no_policy.pngtest_xsl_no_policyhttps://bohops.com/wp-content/uploads/2019/01/test_xsl_bypass_dg_failed.pngtest_xsl_bypass_dg_failedhttps://bohops.com/wp-content/uploads/2019/01/test_xsl_bypass_applocker.pngtest_xsl_bypass_applockerhttps://bohops.com/wp-content/uploads/2019/01/set_constrained_to_full_attempt.pngset_constrained_to_full_attempt2022-12-15T05:05:12+00:00monthlyhttps://bohops.com/2019/05/04/abusing-catalog-file-hygiene-to-bypass-application-whitelisting/https://bohops.com/wp-content/uploads/2019/05/picture5.pngPicture5https://bohops.com/wp-content/uploads/2019/05/picture4.pngPicture4https://bohops.com/wp-content/uploads/2019/05/picture3.pngPicture3https://bohops.com/wp-content/uploads/2019/05/picture2.pngPicture2https://bohops.com/wp-content/uploads/2019/05/picture1.pngPicture1https://bohops.com/wp-content/uploads/2019/05/signed.pngsigned2022-12-15T04:59:35+00:00monthlyhttps://bohops.com/2019/08/19/dotnet-core-a-vector-for-awl-bypass-defense-evasion/https://bohops.com/wp-content/uploads/2019/08/1200px-.net_core_logo.svg_.png1200px-.NET_Core_Logo.svghttps://bohops.com/wp-content/uploads/2019/08/dotnet_modules.pngdotnet_moduleshttps://bohops.com/wp-content/uploads/2019/08/dotnet_msbuild_wdac.pngdotnet_msbuild_wdachttps://bohops.com/wp-content/uploads/2019/08/dotnet_msbuild_failed.pngdotnet_msbuild_failedhttps://bohops.com/wp-content/uploads/2019/08/msbuild_exec.pngmsbuild_exechttps://bohops.com/wp-content/uploads/2019/08/dotnet_classlib.pngdotnet_classlibhttps://bohops.com/wp-content/uploads/2019/08/dotnet_exec.pngdotnet_exechttps://bohops.com/wp-content/uploads/2019/08/dotnet_run.pngdotnet_run2022-12-15T04:55:23+00:00monthlyhttps://bohops.com/2019/11/14/cve-2019-1378-exploiting-an-access-control-privilege-escalation-vulnerability-in-windows-10-update-assistant-wua/2022-12-15T04:41:01+00:00monthlyhttps://bohops.com/2020/02/14/exploring-microsoft-teams-rooms-mtr-console-as-a-potential-attack-vector/2022-12-15T04:39:57+00:00monthlyhttps://bohops.com/2020/05/12/ws-management-com-another-approach-for-winrm-lateral-movement/https://bohops.com/wp-content/uploads/2020/05/18.png18https://bohops.com/wp-content/uploads/2020/05/17.png17https://bohops.com/wp-content/uploads/2020/05/16.png16https://bohops.com/wp-content/uploads/2020/05/15.png15https://bohops.com/wp-content/uploads/2020/05/14.png14https://bohops.com/wp-content/uploads/2020/05/13.png13https://bohops.com/wp-content/uploads/2020/05/12.png12https://bohops.com/wp-content/uploads/2020/05/11.png11https://bohops.com/wp-content/uploads/2020/05/10.png10https://bohops.com/wp-content/uploads/2020/05/09.png092022-12-15T04:39:16+00:00monthlyhttps://bohops.com/2020/10/15/exploring-the-wdac-microsoft-recommended-block-rules-visualuiaverifynative/2022-12-15T04:38:51+00:00monthlyhttps://bohops.com/2020/11/02/exploring-the-wdac-microsoft-recommended-block-rules-part-ii-wfc-fsi/2022-12-15T04:38:08+00:00monthlyhttps://bohops.com/2021/03/16/investigating-net-clr-usage-log-tampering-techniques-for-edr-evasion/2022-12-15T04:37:42+00:00monthlyhttps://bohops.com/2021/05/30/abusing-and-detecting-lolbin-usage-of-net-development-mode-features/2022-12-15T04:37:16+00:00monthlyhttps://bohops.com/2021/08/07/cve-2021-0090-intel-driver-support-assistant-dsa-elevation-of-privilege-eop/2022-12-15T04:36:38+00:00monthlyhttps://bohops.com/2021/10/08/analyzing-and-detecting-a-vmtools-persistence-technique/2022-12-15T04:36:12+00:00monthlyhttps://bohops.com/2022/08/22/investigating-net-clr-usage-log-tampering-techniques-for-edr-evasion-part-2/https://bohops.com/wp-content/uploads/2022/08/image-28.pngimage-28https://bohops.com/wp-content/uploads/2022/08/image-27.pngimage-27https://bohops.com/wp-content/uploads/2022/08/image-26.pngimage-26https://bohops.com/wp-content/uploads/2022/08/image-25.pngimage-25https://bohops.com/wp-content/uploads/2022/08/image-24.pngimage-24https://bohops.com/wp-content/uploads/2022/08/image-23.pngimage-23https://bohops.com/wp-content/uploads/2022/08/image-22.pngimage-22https://bohops.com/wp-content/uploads/2022/08/image-21.pngimage-21https://bohops.com/wp-content/uploads/2022/08/image-20.pngimage-20https://bohops.com/wp-content/uploads/2022/08/image-19.pngimage-192022-12-15T04:35:12+00:00monthlyhttps://bohops.com/2022/04/02/unmanaged-code-execution-with-net-dynamic-pinvoke/2022-04-07T20:06:14+00:00monthlyhttps://bohops.com/about/2021-10-07T02:27:10+00:00weekly0.6https://bohops.comdaily1.02023-11-27T13:14:45+00:00