Basic Bypasses
So far, we have walked through the different types of rules and
the categories of file types protected by AppLocker.
We have configured our Windows 10 victim VM with the default
AppLocker rules and we’re ready to explore various bypasses.
In the following sections, we’ll specifically focus on a variety
of simple bypasses that stem from the relatively poor
configuration enforced through the default rules.
We’ll also demonstrate bypasses
that leverage limitations of AppLocker itself.