Redfox Security·Apr 21Click, Install, Compromise: Abusing ClickOnce in Modern EnterprisesModern enterprises deploy a wide range of security tools to detect malicious attachments, macro-enabled documents, and suspicious…
Yaniv·Sep 21, 2025Asyncrat Campaigns Uncovered: How Attackers Abuse Screenconnect And Open DirectoriesTL;DR: Attackers trojanized connectwise screenconnect installers stored in exposed open directories and used clickonce /bin/ pivots to…
Kerim Kara·Oct 22, 2023Deploying a Windows Forms Application Using ClickOnce: A Comprehensive GuideIntroduction
InPosts By SpecterOps Team MembersbyNick Powers·Jun 7, 2023Less SmartScreen More Caffeine: (Ab)Using ClickOnce for Trusted Code ExecutionThe contents of this blogpost was written by Nick Powers (@zyn3rgy) and Steven Flores (@0xthirteen), and is a written version of the…
Taggart Software LLC·Dec 25, 2020ClickOnce for Rust AppsClickOnce is a cool decentralized way of distributing applications on Windows. I’ll demonstrate distributing a Rust language application…
