changing args to input_arguments as per example

This commit is contained in:
Mo Amiri
2018-05-14 14:19:29 +01:00
parent 907409acfc
commit 9be4935b49
3 changed files with 20 additions and 20 deletions
+8 -8
View File
@@ -1,7 +1,7 @@
---
attack_technique: t1087
display_name: Account Discovery
atomic_tests:
- name: List all accounts
description: |
@@ -14,7 +14,7 @@ atomic_tests:
description: Path where captured results will be placed
type: Path
default: ~/loot.txt
executor:
executor:
name: sh
command: |
cat /etc/passwd > #{output_file}
@@ -30,7 +30,7 @@ atomic_tests:
description: Path where captured results will be placed
type: Path
default: ~/loot.txt
executor:
executor:
name: sh
command: |
cat /etc/sudoers > #{output_file}
@@ -46,7 +46,7 @@ atomic_tests:
description: Path where captured results will be placed
type: Path
default: ~/loot.txt
executor:
executor:
name: sh
command: |
grep 'x:0:' /etc/passwd > #{output_file}
@@ -57,7 +57,7 @@ atomic_tests:
supported_platforms:
- linux
- macos
executor:
executor:
name: sh
command: |
username=$(echo $HOME | awk -F'/' '{print $3}') && lsof -u $username
@@ -67,13 +67,13 @@ atomic_tests:
xxx
supported_platforms:
- linux
- macos
args:
- macos
input_arguments:
output_file:
description: Path where captured results will be placed
type: Path
default: ~/loot.txt
executor:
executor:
name: sh
command: |
lastlog > #{output_file}
+4 -4
View File
@@ -1,14 +1,14 @@
---
attack_technique: t1130
display_name: Install Root Certificate
atomic_tests:
- name: Install root CA on CentOS/RHEL
description: |
Creates a root CA with openssl
supported_platforms:
- linux
args:
input_arguments:
key_filename:
description: Key we create that is used to create the CA certificate
type: Path
@@ -17,7 +17,7 @@ atomic_tests:
description: Path of the CA certificate we create
type: Path
default: rootCA.crt
executor:
executor:
name: sh
command: |
openssl genrsa -out #{key_filename} 4096
@@ -37,4 +37,4 @@ atomic_tests:
# To test the new trust, apply the root certificate or another signed with it to
# a SSL/TLS web service and attempt a connection with curl or wget.
#
# curl https://art.evil.com
# curl https://art.evil.com
+8 -8
View File
@@ -1,7 +1,7 @@
---
attack_technique: t1136
display_name: Create Account
atomic_tests:
- name: Create a user account on a Linux system
description: |
@@ -9,15 +9,15 @@ atomic_tests:
supported_platforms:
- linux
input_arguments:
username:
username:
description: Username of the user to create
type: String
default: evil_user
comment:
comment:
description: Comment to record when creating the user
type: String
default: Evil Account
executor:
executor:
name: bash
command: |
useradd -M -N -r -s /bin/bash -c "#{comment}" #{username}
@@ -27,16 +27,16 @@ atomic_tests:
Creates a user on a MacOS system with dscl
supported_platforms:
- macos
args:
username:
input_arguments:
username:
description: Username of the user to create
type: String
default: evil_user
realname:
realname:
description: "'realname' to record when creating the user"
type: String
default: Evil Account
executor:
executor:
name: bash
command: |
dscl . -create /Users/#{username}