What is Abusing DCOM For Yet Another Lateral Movement Technique
MiniCPS is a framework for Cyber-Physical Systems real-time simulation with support for physical process and control devices simulation, and network emulation.
Exploring an Alternative Method for DCOM Lateral Movement Discovery and Payload Execution
This post examines an alternative approach for identifying DCOM lateral movement and executing payloads. This method focuses on locating DCOM registry keys and values that point to the path of a binary that is not present on the 'remote' machine. We provide an example demonstrating how this strategy can be effective if mobsync.exe is missing from its default location on Windows 2008 R2 and Windows 2012 R2 systems.
Abusing DCOM For Yet Another Lateral Movement Technique Reviews
No reviews yet.
