Code Execution

• regsvr32

• MSHTA

• Control Panel Item

• Executing Code as a Control Panel Item through an Exported Cplapplet Function

• Code Execution through Control Panel Add-ins

• CMSTP

• InstallUtil

• Using MSBuild to Execute Shellcode in C#

• Forfiles Indirect Command Execution

• Application Whitelisting Bypass with WMIC and XSL

• Powershell Without Powershell.exe

• Powershell Constrained Language Mode Bypass

• Forcing Iexplore.exe to Load a Malicious DLL via COM Abuse

• pubprn.vbs Signed Script Code Execution

• PreviousNetNTLMv2 hash stealing using Outlook

• Nextregsvr32