A signature allows you to use it on systems that require VBA macros to be signed.
Wednesday 30 November 2011
Thursday 17 November 2011
Remember Microsoft has features to bypass its own Software Restriction Policies and AppLocker: Circumventing SRP and AppLocker, By Design and Circumventing SRP and AppLocker to Create a New Process, By Design.
Microsoft has issued a hotfix for this bypass: KB2532445
It is only for Windows 7 and Windows Server 2008 R2 though, it will not help you if you use SRP on Windows XP or Vista.
Thanks to @mount_knowledge.
Tuesday 8 November 2011
Here’s a video of an exercise in my White Hat Shellcode Workshop I gave at Brucon in September.
Wednesday 2 November 2011
You can now download a 64-bit version of my Ariad driver.
I’ve been using this driver on my x64 Windows 7 test machine only for a couple of days, so this is still beta software.
As for the installation and configuration, it’s exactly the same as the 32-bit version: you need to download the 32-bit version for the .inf files and the GUI.