Updated T1118 Path and Code (#510)

* Update T1118.yaml

* Update T1118.cs
This commit is contained in:
caseysmithrc
2019-06-14 08:55:21 -06:00
committed by Michael Haag
parent 6988597182
commit cd32b7cf92
2 changed files with 34 additions and 2 deletions
+17 -2
View File
@@ -12,9 +12,24 @@ atomic_tests:
filename:
description: location of the payload
type: Path
default: T1118.dll
default: C:\AtomicRedTeam\atomics\T1118\src\T1118.dll
executor:
name: command_prompt
command: |
C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe /target:library T1118.cs
C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe /target:library /out:C:\AtomicRedTeam\atomics\T1118\src\T1118.dll C:\AtomicRedTeam\atomics\T1118\src\T1118.cs
C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe /logfile= /LogToConsole=false /U #{filename}
- name: InstallUtil GetHelp method call
description: |
Executes the Uninstall Method
supported_platforms:
- windows
input_arguments:
filename:
description: location of the payload
type: Path
default: C:\AtomicRedTeam\atomics\T1118\src\T1118.dll
executor:
name: command_prompt
command: |
C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe /target:library /out:C:\AtomicRedTeam\atomics\T1118\src\T1118.dll C:\AtomicRedTeam\atomics\T1118\src\T1118.cs
C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe /? #{filename}
+17
View File
@@ -12,6 +12,11 @@ Step One:
C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe /target:library T1118.cs
Step Two:
C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe /U /logfile= /logtoconsole=false T1118.dll
HelpText Invocation:
C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe /? T1118.dll
*/
public class Program
@@ -35,4 +40,16 @@ public class Sample : System.Configuration.Install.Installer
Console.WriteLine("Hello There From Uninstall, If you are reading this, prevention has failed.\n");
}
// Override the property 'HelpText'.
//
public override string HelpText
{
get
{
return "Hello There From HelpText, If you are reading this, prevention has failed.\n";
}
}
}