Logon Scripts

Logon Scripts优先于av先执行,我们可以利用这一点来绕过av的敏感操作拦截

注册表路径为:HKEY_CURRENT_USER\Environment,创建一个键为:UserInitMprLogonScript,其键值为我们要启动的程序路径

image

效果如下:

image

零组资料文库 all right reserved,powered by 0-sec.org未经授权禁止转载 2020-03-06 00:17:00

results matching ""

    No results matching ""