https://oddvar.moe/2025/07/03/applocker-bypass-on-lenovo-machines-the-curious-case-of-mfgstat-zip/https://oddvar.moe/wp-content/uploads/2025/07/image-1.pngimagehttps://oddvar.moe/wp-content/uploads/2025/07/image.pngimage2025-07-03T13:07:15+00:00monthlyhttps://oddvar.moe/about/https://oddvar.moe/wp-content/uploads/2017/11/img_1483.jpgIMG_1483https://oddvar.moe/wp-content/uploads/2017/11/img_1490.jpgIMG_1490https://oddvar.moe/wp-content/uploads/2017/11/stairs-lights-abstract-bubbles1.jpgPlaceholder Image2025-07-02T15:41:09+00:00weekly0.6https://oddvar.moe/presentations/2025-01-27T09:41:53+00:00weekly0.6https://oddvar.moe/articles/2023-10-24T09:51:05+00:00weekly0.6https://oddvar.moe/2017/08/13/bypassing-device-guard-umci-using-chm-cve-2017-8625/2023-08-18T06:45:48+00:00monthlyhttps://oddvar.moe/2017/05/18/bypassing-application-whitelisting-with-bginfo/2023-08-18T06:43:04+00:00monthlyhttps://oddvar.moe/2018/03/21/persistence-using-runonceex-hidden-from-autoruns-exe/https://oddvar.moe/wp-content/uploads/2018/03/blog-runonceex-example-doc2.jpgblog-runonceex-example-doc2https://oddvar.moe/wp-content/uploads/2018/03/blog-runonceex-example-doc.jpgblog-runonceex-example-dochttps://oddvar.moe/wp-content/uploads/2018/03/blog-runonceex11.jpgblog-runonceex1https://oddvar.moe/wp-content/uploads/2018/03/blog-runonceex1.jpgblog-runonceex12019-12-16T14:09:15+00:00monthlyhttps://oddvar.moe/2019/05/29/a-small-discovery-about-applocker/https://oddvar.moe/wp-content/uploads/2019/05/applockerfiles.pngAppLockerFIleshttps://oddvar.moe/wp-content/uploads/2019/05/ads-2019-05-29_18-54-31.jpgADS-2019-05-29_18-54-31https://oddvar.moe/wp-content/uploads/2019/05/2019-05-29_18-53-43.jpg2019-05-29_18-53-43https://oddvar.moe/wp-content/uploads/2019/05/2018-09-28_12-56-04.png2018-09-28_12-56-04https://oddvar.moe/wp-content/uploads/2019/05/2019-05-29_18-38-49.jpg2019-05-29_18-38-492019-05-29T17:04:36+00:00monthlyhttps://oddvar.moe/2019/02/01/bypassing-applocker-as-an-admin/https://oddvar.moe/wp-content/uploads/2019/02/applocker_localrules_admin.gifAppLocker_localrules_adminhttps://oddvar.moe/wp-content/uploads/2019/02/replace_applocker_rule-1.gifReplace_AppLocker_Rulehttps://oddvar.moe/wp-content/uploads/2019/02/generate_rule.gifGenerate_rulehttps://oddvar.moe/wp-content/uploads/2019/02/replace_applocker_rule.gifReplace_AppLocker_Rulehttps://oddvar.moe/wp-content/uploads/2019/02/generate_applocker_rule.gifGenerate_AppLocker_Rulehttps://oddvar.moe/wp-content/uploads/2018/12/AppLocker_localrules_admin.gifAppLocker_localrules_adminhttps://oddvar.moe/wp-content/uploads/2018/12/2018-12-21_11-26-06.png2018-12-21_11-26-062023-05-11T23:31:46+00:00monthlyhttps://oddvar.moe/2018/10/25/doing-the-pentesteracademy-red-team-lab/https://oddvar.moe/wp-content/uploads/2018/10/redteamlab.pngredteamlab2018-10-25T16:13:21+00:00monthlyhttps://oddvar.moe/2018/10/06/temporary-constrained-language-mode-in-applocker/https://oddvar.moe/wp-content/uploads/2018/09/applockerclmbypass.gifAppLockerCLMBypasshttps://oddvar.moe/wp-content/uploads/2018/09/2018-09-21_09-50-41.png2018-09-21_09-50-41https://oddvar.moe/wp-content/uploads/2018/09/2018-09-21_09-40-29.png2018-09-21_09-40-292020-12-19T13:42:45+00:00monthlyhttps://oddvar.moe/2018/10/05/trustedsecoddvaroh-yeah/https://oddvar.moe/wp-content/uploads/2018/10/ts-smile-sticker-logo.pngTS-Smile-Sticker-Logo2018-10-05T17:54:19+00:00monthlyhttps://oddvar.moe/2018/09/28/applocker-making-sure-that-local-rules-are-removed/https://oddvar.moe/wp-content/uploads/2018/09/2018-09-28_12-56-04.png2018-09-28_12-56-042018-09-28T11:00:31+00:00monthlyhttps://oddvar.moe/2018/09/06/persistence-using-universal-windows-platform-apps-appx/https://oddvar.moe/wp-content/uploads/2018/09/2018-09-04_23-32-41.png2018-09-04_23-32-41https://oddvar.moe/wp-content/uploads/2018/09/2018-09-04_22-50-37.png2018-09-04_22-50-37https://oddvar.moe/wp-content/uploads/2018/09/2018-09-04_22-37-33.png2018-09-04_22-37-33https://oddvar.moe/wp-content/uploads/2018/09/2018-09-04_22-35-54.png2018-09-04_22-35-54https://oddvar.moe/wp-content/uploads/2018/09/2018-09-04_22-29-55.png2018-09-04_22-29-55https://oddvar.moe/wp-content/uploads/2018/09/2018-09-04_22-22-16.png2018-09-04_22-22-16https://oddvar.moe/wp-content/uploads/2018/09/2018-09-04_22-12-41.png2018-09-04_22-12-412018-09-11T17:47:48+00:00monthlyhttps://oddvar.moe/2018/01/14/putting-data-in-alternate-data-streams-and-how-to-execute-it/https://oddvar.moe/wp-content/uploads/2018/01/blogg-alternatedatastreams_7.jpgBlogg-AlternateDataStreams_7https://oddvar.moe/wp-content/uploads/2018/01/blogg-alternatedatastreams_6.jpgBlogg-AlternateDataStreams_6https://oddvar.moe/wp-content/uploads/2018/01/blogg-alternatedatastreams_5.jpgBlogg-AlternateDataStreams_5https://oddvar.moe/wp-content/uploads/2018/01/blogg-alternatedatastreams_4.jpgBlogg-AlternateDataStreams_4https://oddvar.moe/wp-content/uploads/2018/01/blogg-alternatedatastreams_3.jpgBlogg-AlternateDataStreams_3https://oddvar.moe/wp-content/uploads/2018/01/blogg-alternatedatastreams_2.jpgBlogg-AlternateDataStreams_2https://oddvar.moe/wp-content/uploads/2018/01/blogg-alternatedatastreams_1.jpgBlogg-AlternateDataStreams_1https://oddvar.moe/wp-content/uploads/2018/01/ads_7.jpgADS_7https://oddvar.moe/wp-content/uploads/2018/01/ads_6.jpgADS_6https://oddvar.moe/wp-content/uploads/2018/01/ads_5.jpgADS_52024-11-04T19:05:37+00:00monthlyhttps://oddvar.moe/2018/07/27/applocker-for-admins-does-it-work/https://oddvar.moe/wp-content/uploads/2018/07/wr81f.jpgwr81fhttps://oddvar.moe/wp-content/uploads/2018/07/2018-07-27_10-24-55.png2018-07-27_10-24-55https://oddvar.moe/wp-content/uploads/2018/07/2018-07-27_10-22-59.png2018-07-27_10-22-59https://oddvar.moe/wp-content/uploads/2018/07/2018-07-27_10-06-22.png2018-07-27_10-06-22https://oddvar.moe/wp-content/uploads/2018/07/2018-07-27_09-53-18.png2018-07-27_09-53-18https://oddvar.moe/wp-content/uploads/2018/07/2018-07-25_15-52-18.png2018-07-25_15-52-18https://oddvar.moe/wp-content/uploads/2018/07/2018-07-25_11-16-38.png2018-07-25_11-16-382018-07-27T09:10:11+00:00monthlyhttps://oddvar.moe/2018/07/23/another-way-to-get-to-a-system-shell/https://oddvar.moe/wp-content/uploads/2018/07/2018-07-25_13-18-50.png2018-07-25_13-18-50https://oddvar.moe/wp-content/uploads/2018/07/2018-07-25_12-17-40.png2018-07-25_12-17-40https://oddvar.moe/wp-content/uploads/2018/07/ats-magnifier.gifATs-magnifierhttps://oddvar.moe/wp-content/uploads/2018/07/2018-07-23_12-50-44.png2018-07-23_12-50-44https://oddvar.moe/wp-content/uploads/2018/07/2018-07-23_12-49-29.png2018-07-23_12-49-292018-07-25T11:34:57+00:00monthlyhttps://oddvar.moe/2017/08/15/research-on-cmstp-exe/2018-06-12T11:51:38+00:00monthlyhttps://oddvar.moe/2018/05/14/real-whitelisting-attempt-using-applocker/https://oddvar.moe/wp-content/uploads/2018/05/applockerrw5.pngAppLockerRW5https://oddvar.moe/wp-content/uploads/2018/05/applockerrw4.pngAppLockerRW4https://oddvar.moe/wp-content/uploads/2018/05/applockerrw3.pngAppLockerRW3https://oddvar.moe/wp-content/uploads/2018/05/applockerrw2.pngAppLockerRW2https://oddvar.moe/wp-content/uploads/2018/05/applockerrw1.pngAppLockerRW12018-05-14T14:05:32+00:00monthlyhttps://oddvar.moe/2017/01/24/accessing-clipboard-from-the-lock-screen-in-windows-10/2018-05-02T08:58:27+00:00monthlyhttps://oddvar.moe/2017/01/27/access-clipboard-from-lock-screen-in-windows-10-2/2018-05-02T08:57:08+00:00monthlyhttps://oddvar.moe/2018/04/27/gpscript-exe-another-lolbin-to-the-list/https://oddvar.moe/wp-content/uploads/2018/04/blog-gpscript1.pngBlog-GPScript1https://oddvar.moe/wp-content/uploads/2018/04/gpscript_strings1.jpgGPScript_strings12018-04-30T10:52:00+00:00monthlyhttps://oddvar.moe/2018/04/11/putting-data-in-alternate-data-streams-and-how-to-execute-it-part-2/https://oddvar.moe/wp-content/uploads/2018/04/serviceexecutionads.gifServiceExecutionADShttps://oddvar.moe/wp-content/uploads/2018/04/findstr.giffindstrhttps://oddvar.moe/wp-content/uploads/2018/04/extrac32.gifextrac322021-03-17T16:50:49+00:00monthlyhttps://oddvar.moe/2018/04/10/persistence-using-globalflags-in-image-file-execution-options-hidden-from-autoruns-exe/https://oddvar.moe/wp-content/uploads/2018/04/blog-ifeo-7.jpgblog-IFEO-7https://oddvar.moe/wp-content/uploads/2018/04/blog-ifeo-6.jpgblog-IFEO-6https://oddvar.moe/wp-content/uploads/2018/04/blog-ifeo-5.jpgblog-IFEO-5https://oddvar.moe/wp-content/uploads/2018/04/blog-ifeo-4.jpgblog-IFEO-4https://oddvar.moe/wp-content/uploads/2018/04/blog-ifeo-3.jpgblog-IFEO-3https://oddvar.moe/wp-content/uploads/2018/04/blog-ifeo-2.jpgblog-IFEO-2https://oddvar.moe/wp-content/uploads/2018/04/blog-ifeo-1.jpgblog-IFEO-12018-12-27T13:41:44+00:00monthlyhttps://oddvar.moe/2018/03/15/windows-defender-attack-surface-reduction-rules-bypass/https://oddvar.moe/wp-content/uploads/2018/03/wdasr-config4.pngWDASR-Config4https://oddvar.moe/wp-content/uploads/2018/03/wdasr-config3-jpg.pngWDASR-Config3https://oddvar.moe/wp-content/uploads/2018/03/wdasr-config-jpg.pngWDASR-Confighttps://oddvar.moe/wp-content/uploads/2018/03/wdasr-config2.jpgWDASR-Config2https://oddvar.moe/wp-content/uploads/2018/03/wdasr-config.pngWDASR-Config2018-03-15T16:19:06+00:00monthlyhttps://oddvar.moe/2017/12/13/applocker-case-study-how-insecure-is-it-really-part-1/https://oddvar.moe/wp-content/uploads/2017/12/update_applockerblog11.pngUpdate_AppLockerBlog11https://oddvar.moe/wp-content/uploads/2017/12/update_applockerblog10.pngUpdate_AppLockerBlog10https://oddvar.moe/wp-content/uploads/2017/12/update_applockerblog9.pngUpdate_AppLockerBlog9https://oddvar.moe/wp-content/uploads/2017/12/update_applockerblog7.pngUpdate_AppLockerBlog7https://oddvar.moe/wp-content/uploads/2017/12/update_applockerblog6.pngUpdate_AppLockerBlog6https://oddvar.moe/wp-content/uploads/2017/12/update_applockerblog4.pngUpdate_AppLockerBlog4https://oddvar.moe/wp-content/uploads/2017/12/update_applockerblog5.pngUpdate_AppLockerBlog5https://oddvar.moe/wp-content/uploads/2017/12/update_applockerblog3.pngUpdate_AppLockerBlog3https://oddvar.moe/wp-content/uploads/2017/12/update_applockerblog2.pngUpdate_AppLockerBlog2https://oddvar.moe/wp-content/uploads/2017/12/update_applockerblog1.pngUpdate_AppLockerBlog12018-05-31T08:38:15+00:00monthlyhttps://oddvar.moe/contact/https://oddvar.moe/wp-content/uploads/2017/11/person-smartphone-office-table.jpegPlaceholder Image2018-01-11T01:19:24+00:00weekly0.6https://oddvar.moe/2018/01/03/office-365-safe-links-bypass/https://oddvar.moe/wp-content/uploads/2018/01/o365bypass_8.pngO365Bypass_8https://oddvar.moe/wp-content/uploads/2018/01/o365bypass_7.pngO365Bypass_7https://oddvar.moe/wp-content/uploads/2018/01/o365bypass_6.pngO365Bypass_6https://oddvar.moe/wp-content/uploads/2018/01/o365bypass_5.pngO365Bypass_5https://oddvar.moe/wp-content/uploads/2018/01/o365bypass_4.pngO365Bypass_4https://oddvar.moe/wp-content/uploads/2018/01/o365bypass_3.pngO365Bypass_3https://oddvar.moe/wp-content/uploads/2018/01/o365bypass_2.pngO365Bypass_2https://oddvar.moe/wp-content/uploads/2018/01/o365bypass_1.pngO365Bypass_12019-09-26T01:22:16+00:00monthlyhttps://oddvar.moe/2017/12/21/applocker-case-study-how-insecure-is-it-really-part-2/https://oddvar.moe/wp-content/uploads/2017/12/questionmark.pngquestionMarkhttps://oddvar.moe/wp-content/uploads/2017/12/applocker-part2-11.pngApplocker-part2-11https://oddvar.moe/wp-content/uploads/2017/12/applocker-part2-10.pngApplocker-part2-10https://oddvar.moe/wp-content/uploads/2017/12/applocker-part2-9.pngApplocker-part2-9https://oddvar.moe/wp-content/uploads/2017/12/applocker-part2-81.pngApplocker-part2-8https://oddvar.moe/wp-content/uploads/2017/12/applocker-part2-7.pngApplocker-part2-7https://oddvar.moe/wp-content/uploads/2017/12/applocker-part2-6.pngApplocker-part2-6https://oddvar.moe/wp-content/uploads/2017/12/applocker-part2-5.pngApplocker-part2-5https://oddvar.moe/wp-content/uploads/2017/12/applocker-part2-4.pngApplocker-part2-4https://oddvar.moe/wp-content/uploads/2017/12/applocker-part2-3.pngApplocker-part2-32018-02-19T08:17:18+00:00monthlyhttps://oddvar.moe/2017/12/21/harden-windows-with-applocker-based-on-case-study-part-2/https://oddvar.moe/wp-content/uploads/2017/12/applocker-hardening-part2-6.pngAppLocker-Hardening-part2-6https://oddvar.moe/wp-content/uploads/2017/12/applocker-hardening-part2-5.pngAppLocker-Hardening-part2-5https://oddvar.moe/wp-content/uploads/2017/12/applocker-hardening-part2-4.pngAppLocker-Hardening-part2-4https://oddvar.moe/wp-content/uploads/2017/12/applocker-hardening-part2-3.pngAppLocker-Hardening-part2-3https://oddvar.moe/wp-content/uploads/2017/12/applocker-hardening-part2-2.pngAppLocker-Hardening-part2-2https://oddvar.moe/wp-content/uploads/2017/12/applocker-hardening-part2-1.pngAppLocker-Hardening-part2-12018-11-20T15:15:42+00:00monthlyhttps://oddvar.moe/2017/12/13/harden-windows-with-applocker-based-on-case-study-part-1/https://oddvar.moe/wp-content/uploads/2017/12/applocker-eventlog1.pngAppLocker-Eventlog1https://oddvar.moe/wp-content/uploads/2017/12/applockerposh.pngAppLockerPoShhttps://oddvar.moe/wp-content/uploads/2017/12/tribute.pngTributehttps://oddvar.moe/wp-content/uploads/2017/12/applocker-hardeningtest2.pngAppLocker-HardeningTest2https://oddvar.moe/wp-content/uploads/2017/12/applocker-hardeningtest1.pngAppLocker-HardeningTest1https://oddvar.moe/wp-content/uploads/2017/12/applocker-hardening4.pngAppLocker-Hardening4https://oddvar.moe/wp-content/uploads/2017/12/applocker-hardening11.pngAppLocker-Hardening11https://oddvar.moe/wp-content/uploads/2017/12/applocker-hardening3.pngAppLocker-Hardening3https://oddvar.moe/wp-content/uploads/2017/12/applocker-hardening2.pngAppLocker-Hardening2https://oddvar.moe/wp-content/uploads/2017/12/applocker-hardening1.pngAppLocker-Hardening12018-02-07T12:50:28+00:00monthlyhttps://oddvar.moe/2017/10/29/my-experience-with-it-dev-connection-2017-and-demo-videos/https://oddvar.moe/wp-content/uploads/2017/10/102917_2115_myexperienc1.jpg102917_2115_Myexperienc1.jpg2017-11-08T07:10:02+00:00monthlyhttps://oddvar.moe/2017/09/13/defense-in-depth-writeup/2017-11-07T21:39:44+00:00monthlyhttps://oddvar.moe/2017/05/30/ping-is-okay-right/2017-11-07T21:38:33+00:00monthlyhttps://oddvar.moe/2017/05/22/clarification-bginfo-4-22-applocker-still-vulnerable/2017-11-07T21:37:35+00:00monthlyhttps://oddvar.moe/2017/02/07/nic-2017-slides-notes-and-a-video/2017-11-07T21:36:34+00:00monthlyhttps://oddvar.moedaily1.02025-07-03T13:07:15+00:00