How to Proxy Command Execution: 'Living Off The Land' Hacks

🔥 YOUTUBE ALGORITHM ➡ Like, Comment, & Subscribe!

[Logan-vwbg]

John! Thanks for everything you put into this community. I started my cyber career path last year and you've been a tremendous resource. Thanks again and cheers to the new year!

[Counterhackingsafe]

John, you are a master of the craft. Every time I watch one of your videos, I learn something new and valuable. The way you explain "Living off the Land" hacks is clear and easy to understand, making it accessible to all levels of cyber enthusiasts. Keep up the great work and thank you for all the knowledge you share with the community.

[netscout]

Getting to see how you used procmon to investigate the scenario was awesome. Well done

[RealCyberCrime]

Living off the land - a nightmare for script kiddies

[purplesprout]

ok, off to test if the xdr detects this and if not rule creation and more testing! Thanks John, the red perspective is a great way to continue to build the blue fortress!

[patrickslomian]

Happy New Year guys ! : )
John, I love your content, please keep up the great work! :) !
Btw. Grzegorz Tworek is a great teacher, his knowledge about Windows security is legendary .

[evilcorp]

Wow, this is amazing. Thank you for your hard work, John!

[DarkFaken]

Your content is always top notch! Thanks for everything ❤️

[cumMan]

Interesting insight! I really wonder if AV providers look out for something like this. The AV's detection for this would heavily depend on how that malware behaves.

[jorisschepers]

This content is gold. Thanks for explaining it in a calm and step by step way. Keep it going John.

[hamzarashid]

John your videos make me motivated, Thank you so much for these amazing videos.

[daiceman]

I wonder if this will be patched anytime soon...

What level of privilege did calc.exe end up spawning with? Could this be a possible avenue for privesc, or is it meant only as a means of obfuscation?

As always, love the content!

[centdemeern]

6:32 - Tip: the windows equivalent to “which” is “where”, so you can do “where tpmtool”

[cybersploit]

Interesting! We’d love more videos like this

[sentinelaenow]

Magnificent! Thanks a million! You rock Sir!

[first-thoughtgiver-of-will]

This shows how we really need to rework our operating systems.

[Zay-yah]

Books of war - Living off the land.
Arrogance - Feed them poison.

[ThiagoSouza-oofj]

OMG! Awesome Content John, as always!

[MygenteTV]

I wanted something like this weeks ago the problem is Windows will stop any weird exec you try to save into the machine

[LindomarkBiohazardYTB]

hum uma boa falha execution remote do windowns genial