security-tools/atomic-red-team
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Generate GUIDs from job=generate-docs branch=master [skip ci]

Browse Source
This commit is contained in:
Atomic Red Team GUID generator
2023-11-17 17:35:43 +00:00
parent 14b35456cf
commit 13252e354f
2 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
atomics/T1055.015/T1055.015.yaml
+1
View File
@@ -2,6 +2,7 @@ attack_technique: T1055.015
display_name: 'Process Injection: ListPlanting'
atomic_tests:
- name: Process injection ListPlanting
auto_generated_guid: 4f3c7502-b111-4dfe-8a6e-529307891a59
description: 'This test injects shellcode into a remote RegEdit process using the ListPlanting technique. ListPlanting exploits Window with ListView control. Code write to memory with NtWriteVirtualMemory. The shellcode is executed via PostMessage. When successful, a message box will appear with the title "Warning" and the content "Atomic Red Team" after a few seconds. Notepad will open following the appearance of the message box.'
supported_platforms:
- windows
atomics/used_guids.txt
+1
View File
@@ -1501,3 +1501,4 @@ a9030b20-dd4b-4405-875e-3462c6078fdc
0128e48e-8c1a-433a-a11a-a5387384f1e1
1f6743da-6ecc-4a93-b03f-dc357e4b313f
a72cfef8-d252-48b3-b292-635d332625c3
4f3c7502-b111-4dfe-8a6e-529307891a59