security-tools/atomic-red-team
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Generated docs from job=generate-docs branch=master [ci skip]

Browse Source
This commit is contained in:
Atomic Red Team doc generator
2023-02-13 22:53:46 +00:00
parent f50d13881d
commit e2e66117b8
3 changed files with 20 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files
atomics/Indexes/index.yaml
+8 -8
View File
@@ -38546,14 +38546,14 @@ privilege-escalation:
text_to_append:
description: Text to append to the ~/.profile file
type: String
default: "# Hello from Atomic Red Team T1546.004"
default: "# Atomic Red Team was here... T1546.004"
executor:
elevation_required: false
name: sh
command: 'echo ''#{text_to_append}'' >> ~/.profile
'
cleanup_command: 'sed -i "s/# Atomic Red Team was here! T1546.004//" ~/.profile
cleanup_command: 'sed -i "s/# Atomic Red Team was here... T1546.004//" ~/.profile
'
- name: System shell profile scripts
@@ -38569,14 +38569,14 @@ privilege-escalation:
text_to_append:
description: Text to append to the /etc/profile.d/bash_completion.sh file
type: String
default: "# Hello from Atomic Red Team T1546.004"
default: "# Atomic Red Team was here... T1546.004"
executor:
elevation_required: true
name: sh
command: 'echo ''#{text_to_append}'' >> /etc/profile.d/bash_completion.sh
'
cleanup_command: 'sed -i "s/# Atomic Red Team was here! T1546.004//" /etc/profile.d/bash_completion.sh
cleanup_command: 'sed -i "s/# Atomic Red Team was here... T1546.004//" /etc/profile.d/bash_completion.sh
'
T1134.005:
@@ -62237,14 +62237,14 @@ persistence:
text_to_append:
description: Text to append to the ~/.profile file
type: String
default: "# Hello from Atomic Red Team T1546.004"
default: "# Atomic Red Team was here... T1546.004"
executor:
elevation_required: false
name: sh
command: 'echo ''#{text_to_append}'' >> ~/.profile
'
cleanup_command: 'sed -i "s/# Atomic Red Team was here! T1546.004//" ~/.profile
cleanup_command: 'sed -i "s/# Atomic Red Team was here... T1546.004//" ~/.profile
'
- name: System shell profile scripts
@@ -62260,14 +62260,14 @@ persistence:
text_to_append:
description: Text to append to the /etc/profile.d/bash_completion.sh file
type: String
default: "# Hello from Atomic Red Team T1546.004"
default: "# Atomic Red Team was here... T1546.004"
executor:
elevation_required: true
name: sh
command: 'echo ''#{text_to_append}'' >> /etc/profile.d/bash_completion.sh
'
cleanup_command: 'sed -i "s/# Atomic Red Team was here! T1546.004//" /etc/profile.d/bash_completion.sh
cleanup_command: 'sed -i "s/# Atomic Red Team was here... T1546.004//" /etc/profile.d/bash_completion.sh
'
T1547.002:
atomics/Indexes/linux-index.yaml
+8 -8
View File
@@ -24829,14 +24829,14 @@ privilege-escalation:
text_to_append:
description: Text to append to the ~/.profile file
type: String
default: "# Hello from Atomic Red Team T1546.004"
default: "# Atomic Red Team was here... T1546.004"
executor:
elevation_required: false
name: sh
command: 'echo ''#{text_to_append}'' >> ~/.profile
'
cleanup_command: 'sed -i "s/# Atomic Red Team was here! T1546.004//" ~/.profile
cleanup_command: 'sed -i "s/# Atomic Red Team was here... T1546.004//" ~/.profile
'
- name: System shell profile scripts
@@ -24852,14 +24852,14 @@ privilege-escalation:
text_to_append:
description: Text to append to the /etc/profile.d/bash_completion.sh file
type: String
default: "# Hello from Atomic Red Team T1546.004"
default: "# Atomic Red Team was here... T1546.004"
executor:
elevation_required: true
name: sh
command: 'echo ''#{text_to_append}'' >> /etc/profile.d/bash_completion.sh
'
cleanup_command: 'sed -i "s/# Atomic Red Team was here! T1546.004//" /etc/profile.d/bash_completion.sh
cleanup_command: 'sed -i "s/# Atomic Red Team was here... T1546.004//" /etc/profile.d/bash_completion.sh
'
T1134.005:
@@ -41596,14 +41596,14 @@ persistence:
text_to_append:
description: Text to append to the ~/.profile file
type: String
default: "# Hello from Atomic Red Team T1546.004"
default: "# Atomic Red Team was here... T1546.004"
executor:
elevation_required: false
name: sh
command: 'echo ''#{text_to_append}'' >> ~/.profile
'
cleanup_command: 'sed -i "s/# Atomic Red Team was here! T1546.004//" ~/.profile
cleanup_command: 'sed -i "s/# Atomic Red Team was here... T1546.004//" ~/.profile
'
- name: System shell profile scripts
@@ -41619,14 +41619,14 @@ persistence:
text_to_append:
description: Text to append to the /etc/profile.d/bash_completion.sh file
type: String
default: "# Hello from Atomic Red Team T1546.004"
default: "# Atomic Red Team was here... T1546.004"
executor:
elevation_required: true
name: sh
command: 'echo ''#{text_to_append}'' >> /etc/profile.d/bash_completion.sh
'
cleanup_command: 'sed -i "s/# Atomic Red Team was here! T1546.004//" /etc/profile.d/bash_completion.sh
cleanup_command: 'sed -i "s/# Atomic Red Team was here... T1546.004//" /etc/profile.d/bash_completion.sh
'
T1547.002:
atomics/T1546.004/T1546.004.md
+4 -4
View File
@@ -149,7 +149,7 @@ An adversary may wish to establish persistence by executing malicious commands f
#### Inputs:
| Name | Description | Type | Default Value |
|------|-------------|------|---------------|
| text_to_append | Text to append to the ~/.profile file | String | # Hello from Atomic Red Team T1546.004|
| text_to_append | Text to append to the ~/.profile file | String | # Atomic Red Team was here... T1546.004|
#### Attack Commands: Run with `sh`!
@@ -161,7 +161,7 @@ echo '#{text_to_append}' >> ~/.profile
#### Cleanup Commands:
```sh
sed -i "s/# Atomic Red Team was here! T1546.004//" ~/.profile
sed -i "s/# Atomic Red Team was here... T1546.004//" ~/.profile
```
@@ -186,7 +186,7 @@ An adversary may wish to establish persistence by adding commands into any of th
#### Inputs:
| Name | Description | Type | Default Value |
|------|-------------|------|---------------|
| text_to_append | Text to append to the /etc/profile.d/bash_completion.sh file | String | # Hello from Atomic Red Team T1546.004|
| text_to_append | Text to append to the /etc/profile.d/bash_completion.sh file | String | # Atomic Red Team was here... T1546.004|
#### Attack Commands: Run with `sh`! Elevation Required (e.g. root or admin)
@@ -198,7 +198,7 @@ echo '#{text_to_append}' >> /etc/profile.d/bash_completion.sh
#### Cleanup Commands:
```sh
sed -i "s/# Atomic Red Team was here! T1546.004//" /etc/profile.d/bash_completion.sh
sed -i "s/# Atomic Red Team was here... T1546.004//" /etc/profile.d/bash_completion.sh
```