Indirect Command Execution – Penetration Testing Lab

The windows ecosystem provides multiple binaries that could be used by adversaries to execute arbitrary commands that will evade detection especially in environments that are monitoring binaries such as "cmd.exe". In certain occasions the techniques described below could be used to bypass application whitelisting products if rules are not configured properly (whitelist by path or…

Indirect Command Execution: Defense Evasion (T1202) - Hacking Articles

Kali Linux Penetration Testing Tutorial: How to Use Kali Linux

Web Application Penetration Testing: A Practical Guide

PentesterLab: Learn Web App Pentesting!

File Inclusion Vulnerabilities: What are they and how do they work?

Indirect Command Execution – Penetration Testing Lab

Information disclosure vulnerabilities

GSM/GPRS Traffic Interception for Penetration Testing Engagements, NCC Group Research Blog

Securing LLM Systems Against Prompt Injection

CVE-2021-31956 Exploiting the Windows Kernel (NTFS with WNF) – Part 2, NCC Group Research Blog