security-tools/atomic-red-team
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update typos and small details T1071.yaml (#2909)

Browse Source 
Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
This commit is contained in:
Marco Pedrinazzi
2024-08-24 21:06:28 +02:00
committed by GitHub
parent c2bd690004
commit 03464493cc
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
atomics/T1071/T1071.yaml
+3 -3
View File
@@ -4,13 +4,13 @@ atomic_tests:
- name: Telnet C2
auto_generated_guid: 3b0df731-030c-4768-b492-2a3216d90e53
description: |
An adversary may establish telnet communication from compromised endpoint to command and control (C2) server to be able to operate more attack on objectives.
An adversary may establish Telnet communication from a compromised endpoint to a command and control (C2) server in order to carry out additional attacks on objectives.
supported_platforms:
- windows
dependency_executor_name: powershell
dependencies:
- description: |
Command and Control (C2) server cam be established by running PathToAtomicsFolder\T1071\bin\telnet_server.exe on specified server with specified IP that must be reachable by client (telnet_client.exe)
A command and control (C2) server can be established by running PathToAtomicsFolder\T1071\bin\telnet_server.exe on a specified server with a specified IP that must be reachable by a client (telnet_client.exe)
prereq_command: |
$connection = Test-NetConnection -ComputerName #{server_ip} -Port #{server_port}
if ($connection.TcpTestSucceeded) {exit 0} else {exit 1}
@@ -20,7 +20,7 @@ atomic_tests:
server_ip:
description: C2 server IP or URL
type: url
default: 127.0.0.1 # Replace "example.com" with the actual IP or URL
default: 127.0.0.1 # Replace "127.0.0.1" with the actual IP or URL
client_path:
description: Client agent path
type: path