From da9748c7db0c36ebad7d03e9b5c47ba60d6ba941 Mon Sep 17 00:00:00 2001
From: caseysmithrc <30840394+caseysmithrc@users.noreply.github.com>
Date: Tue, 4 Sep 2018 20:44:37 -0600
Subject: [PATCH] parameterized path and source code

---
 atomics/T1121/T1121.yaml | 22 +++++++++++++++-------
 1 file changed, 15 insertions(+), 7 deletions(-)

diff --git a/atomics/T1121/T1121.yaml b/atomics/T1121/T1121.yaml
index 3b4486e2..3e50bd0b 100644
--- a/atomics/T1121/T1121.yaml
+++ b/atomics/T1121/T1121.yaml
@@ -9,15 +9,19 @@ atomic_tests:
   supported_platforms:
     - windows
   input_arguments:
-    filename:
+    file_name:
       description: Location of the payload
       type: Path
       default: T1121.dll
+    source_file:
+      description: Location of the CSharp source_file
+      type: Path
+      default: C:\AtomicRedTeam\atomics\T1121\src\T1121.cs
   executor:
     name: command_prompt
     command: |
-      C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe /r:System.EnterpriseServices.dll /target:library C:\AtomicRedTeam\atomics\T1121\src\T1121.cs
-      C:\Windows\Microsoft.NET\Framework\v4.0.30319\regasm.exe /U T1121.dll
+      C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe /r:System.EnterpriseServices.dll /target:library #{source_file}
+      C:\Windows\Microsoft.NET\Framework\v4.0.30319\regasm.exe /U #{file_name}
 
 - name: Regsvs Uninstall Method Call Test
   description: |
@@ -25,17 +29,21 @@ atomic_tests:
   supported_platforms:
     - windows
   input_arguments:
-    filename:
+    file_name:
       description: Location of the payload
       type: Path
       default: T1121.dll
+    source_file:
+      description: Location of the CSharp source_file
+      type: Path
+      default: C:\AtomicRedTeam\atomics\T1121\src\T1121.cs
   executor:
     name: powershell
     command: |
       $key = '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'
       $Content = [System.Convert]::FromBase64String($key)
       Set-Content key.snk -Value $Content -Encoding Byte
-      C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe /r:System.EnterpriseServices.dll /target:library /keyfile:key.snk C:\AtomicRedTeam\atomics\T1121\src\T1121.cs
-      C:\Windows\Microsoft.NET\Framework\v4.0.30319\regsvcs.exe T1121.dll
-      del T1121.dll
+      C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe /r:System.EnterpriseServices.dll /target:library /keyfile:key.snk #{source_file}
+      C:\Windows\Microsoft.NET\Framework\v4.0.30319\regsvcs.exe #{file_name}
+      del #{file_name}
       del key.snk