Skip to content

Instantly share code, notes, and snippets.

@trustedsec
Created November 2, 2017 15:11
Show Gist options
  • Star 7 You must be signed in to star a gist
  • Fork 6 You must be signed in to fork a gist
  • Save trustedsec/686057a1b8cdf3e580c57b211b263abe to your computer and use it in GitHub Desktop.
Save trustedsec/686057a1b8cdf3e580c57b211b263abe to your computer and use it in GitHub Desktop.
List of applications for code execution via legit binaries
Rundll32.exe
Regsvr32.exe
Mshta.exe
Msbuild.exe
Cbd.exe
Csc.exe
Tracker.exe
Ntsd.exe
Bginfo.exe
Kd.exe
Rcsi.exe
Dnx.exe
Csi.exe
Certutil.exe
Certreq.exe
Dbghost.exe
InstallUtil.exe
Msxsl.exe
Regsvcs.exe
Regasm.exe
MSDT.exe
Dfsvc.exe
IEExec.exe
Control.exe
CMSTP.exe
Xwizard.exe
Fsi.exe
Obdconf.exe
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment