582 B
582 B
odbcconf.exe
- Functions: Execute
odbcconf -f file.rsp
Acknowledgements:
- Casey Smith - @subtee
- Nick Tyrer - @NickTyrer
Code sample: *
Resources:
- https://gist.github.com/NickTyrer/6ef02ce3fd623483137b45f65017352b
- https://github.com/woanware/application-restriction-bypasses
- https://twitter.com/subTee/status/789459826367606784
Full path:
c:\windows\system32\odbcconf.exe
c:\windows\sysWOW64\odbcconf.exe
Notes: Text from @subtee tweet:
Loads Dll from path in my.rsp.
Hide from command line auditing watching for regsvr32