ClickOnce (Twice or Thrice): A Technique for Social Engineering and (Un)trusted Command Execution
#Security Testing#Offensive Security
A document that helps inform red team planning by contrasting against the very specific red team style described in Red Teams.
ClickOnce: A Microsoft Technology for Easy Application Deployment
ClickOnce is a Microsoft technology that allows users to install and run a Windows-based smart client application simply by clicking a link on a web page. With basic knowledge of C# coding, a red teamer or penetration tester can enhance their ethical hacker toolkit with this additional capability.
What are the requirements for operational use?
What are the requirements for operational use? To get started with ClickOnce, we need to prepare a few essential items: For social engineering campaigns, it is necessary to use Microsoft web browsers (Edge/Internet Explorer) to launch the ClickOnce installer. Additionally, the target organizations must have the correct version of the .NET Framework installed to run the specific payload.
