SharpEventPersist
SharpEventPersist copied to clipboard
Published
20 hours ago •
improsec
improsec
Persistence by writing/reading shellcode from Event Log
Results
2
SharpEventPersist issues
Sort by
recently updated
recently updated
newest added
hello，
1
Using shellcode: C:\Users\Administrator\Desktop\payload.bin Setting event log instance id: 1337 Setting event log source to: Cobaltstrick Setting event log to: Key Management Service [-] Invoke_3 on EntryPoint failed. why？
