DΛΣMӨП

Catalog LOLBAS

LOL · Library

Advpack.dll

5 techniques WindowsLOLBAS GPL-3.0

AWL Bypass

AWL / Policy Bypass Windows

Execute the specified (local or remote) .wsh/.sct script with scrobj.dll in the .inf file by calling an information file directive (section name specified).

Use Run local or remote script(let) code through INF file specification.

rundll32.exe advpack.dll,LaunchINFSection {PATH:.inf},DefaultInstall_SingleUser,1,
Context
user
Native
AWL Bypass

AWL Bypass

AWL / Policy Bypass Windows

Execute the specified (local or remote) .wsh/.sct script with scrobj.dll in the .inf file by calling an information file directive (DefaultInstall section implied).

Use Run local or remote script(let) code through INF file specification.

rundll32.exe advpack.dll,LaunchINFSection {PATH:.inf},,1,
Context
user
Native
AWL Bypass

Execute

Execution Windows

Launch a DLL payload by calling the RegisterOCX function.

Use Load a DLL payload.

rundll32.exe advpack.dll,RegisterOCX {PATH:.dll}
Context
user
Native
Execute

Execute

Execution Windows

Launch an executable by calling the RegisterOCX function.

Use Run an executable payload.

rundll32.exe advpack.dll,RegisterOCX {PATH:.exe}
Context
user
Native
Execute

Execute

Execution Windows

Launch command line by calling the RegisterOCX function.

Use Run an executable payload.

rundll32 advpack.dll, RegisterOCX {CMD}
Context
user
Native
Execute