Skip to content
Threat Feed
Subscribe

Tag

Application-Shimming

2 briefs RSS
medium advisory

Potential Application Shimming via Sdbinst

This brief covers the abuse of application shimming in Windows via `sdbinst.exe` to achieve persistence and privilege escalation by executing arbitrary code within legitimate processes.

Windows persistence privilege-escalation application-shimming
3r 2t
medium advisory

Potential Application Shimming via Sdbinst

Attackers abuse the Application Shim functionality in Windows by using `sdbinst.exe` with malicious arguments to achieve persistence and execute arbitrary code within legitimate Windows processes.

Windows +1 persistence privilege-escalation application-shimming
2r 2t