What is the Logon Scripts persistence technique and where is it configured?
The Logon Scripts persistence technique involves creating a registry key `UserInitMprLogonScript` under `HKCU\Environment` and setting its value to the path of a batch file. This script will execute each time the user logs on. It is a well-known method for maintaining access on a Windows system.
---
**Related reading:**
- Use Logon Scripts to maintain persistence — original article
- Penetration Techniques - Obtaining Net-NTLM Hash via HTTP Protocol
- Webmin<=1.920-Unauthenticated_RCE(CVE-2019-15107) Exploitation Test
- Pupy Exploitation Analysis - Features on Windows Platform
---
**Related reading:**
- Use Logon Scripts to maintain persistence — original article
- Penetration Techniques - Obtaining Net-NTLM Hash via HTTP Protocol
- Webmin<=1.920-Unauthenticated_RCE(CVE-2019-15107) Exploitation Test
- Pupy Exploitation Analysis - Features on Windows Platform
Logon ScriptspersistenceregistryHKCU\EnvironmentUserInitMprLogonScript