AppLocker and Constrained Language Mode
Run code on hosts with allow-lists or restricted PowerShell. Used in 11 machines, sorted from easiest to hardest. The ▶ link takes you to the minute of the video where it is used.
Cheatsheets and tools
- Vhost and subdomain fuzzing
- Default credentials
- Insecure deserialization
- Command injection
- Password spraying and valid users
- Credentials in files
- Internal services and port forwarding
- Weak or homemade cryptography
- Backups and archives
- Saved credentials / DPAPI
- AppLocker and Constrained Language Mode