Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Penetration Testing: Stopping an Unstoppable Windows Service

netspi.com | blog | #windows | #penetration-testing | #security-testing | #antivirus | #windows-services

Summary

Every penetration tester has a toolkit they use for escalating their privileges on the network. In some cases, the tester will copy the toolkit over to a target system once it has been compromised. However, anti-virus software has gotten pretty good at catching tools commonly included in such toolkits.
Published
Collected

original ↗

Related coverage

blog · netspi.com
The Illusion of Security
Knowing top vulnerabilities and defenses is half the equation; realistic adversarial testing, not compliance checklists, is the practice that actually improves organizational security.
blog · projectblack.io
Bypassing EDR with Local AI
A pentest shows Claude refuses to build an LSASS dumper, but local DeepSeek and uncensored Qwen models produce a working XOR-encrypted minidumper, making AI-assisted EDR evasion nearly effortless.
blog · netspi.com
Verifying the Verifier – Assessing Identity Verification Services
Details how to assess identity verification services: gather authentic control data, craft spoofed documents and biometrics, and test whether AI-driven IDV separates real users from fraud.
blog · netspi.com
The Penetration Testing Life Cycle Explained
A walkthrough of the penetration testing life cycle—planning, scanning, exploitation, persistence, and reporting—and how a structured process yields consistent findings and measurable security gains.
blog · netspi.com
Ask These 10 Questions to Enhance Your Social Engineering Testing
Social engineering remains the top way attackers gain entry. This article lists ten questions spanning phishing, vishing, and physical pentesting that help organizations get more from their testing.
blog · netspi.com
Elevating Your Defenses with NetSPI’s Updated Social Engineering Solutions
NetSPI updates its social engineering offerings with adversarial techniques mimicking real-world phishing and vishing, giving organizations a realistic assessment of human-layer defenses.
back