2018-04-18 13:41:44 +00:00
|
|
|
## odbcconf.exe
|
|
|
|
|
|
|
|
|
|
* Functions: Execute
|
|
|
|
|
|
|
|
|
|
```
|
|
|
|
|
odbcconf -f file.rsp
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
Acknowledgements:
|
|
|
|
|
* Casey Smith - @subtee
|
2018-04-18 21:12:38 +00:00
|
|
|
* Nick Tyrer - @NickTyrer
|
|
|
|
|
|
|
|
|
|
Code sample:
|
|
|
|
|
*
|
|
|
|
|
|
|
|
|
|
Resources:
|
|
|
|
|
* https://gist.github.com/NickTyrer/6ef02ce3fd623483137b45f65017352b
|
|
|
|
|
* https://github.com/woanware/application-restriction-bypasses
|
2018-04-20 13:31:50 +00:00
|
|
|
* https://twitter.com/subTee/status/789459826367606784
|
2018-04-18 21:12:38 +00:00
|
|
|
|
|
|
|
|
Full path:
|
|
|
|
|
```
|
|
|
|
|
c:\windows\system32\odbcconf.exe
|
|
|
|
|
c:\windows\sysWOW64\odbcconf.exe
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
Notes:
|
2018-04-20 13:31:50 +00:00
|
|
|
Text from @subtee tweet:
|
|
|
|
|
```
|
|
|
|
|
Loads Dll from path in my.rsp.
|
|
|
|
|
Hide from command line auditing watching for regsvr32
|
|
|
|
|
```
|
2018-04-18 21:12:38 +00:00
|
|
|
|
