Backdooring ClickOnce .NET for Initial Access: A Practical Example

Backdooring ClickOnce .NET Apps for Initial Access: A Practical Example

This blogpost is about demonstrating the awesome ClickOnce .NET backdooring technique by Nick Powers (@zyn3rgy) and Steven F (@0xthirteen) presented at Defcon30. Here I tried to recreate the technique based on the written version of the presentation.

About

First of all, without unnecessarily repeating the original presentation and blogpost, ClickOnce is an easy deployment and execute technique (even for regular non-admin users) for applications …

dotnet it security offensive security phishing red team