Written by 妖怪June 10, 2020 A very rough x64 POC for spoofing environment variables (similar to argument spoofing) with a focus on setting the COMPlus_ETWEnabled=0 var used to disable ETW in .NET · GitHub https://gist.github.com/xpn/64e5b6f7ad370c343e3ab7e9f9e22503 Share this: Share on X (Opens in new window) X Share on Facebook (Opens in new window) Facebook Like this:Like Loading...
