diff --git a/atomics/T1009/T1009.md b/atomics/T1009/T1009.md index 7e5293c5..2362559e 100644 --- a/atomics/T1009/T1009.md +++ b/atomics/T1009/T1009.md @@ -18,12 +18,10 @@ Uses dd to add a zero to the binary to change the hash #### Inputs | Name | Description | Type | Default Value | |------|-------------|------|---------------| -| binary_to_pad | Path of binary to be padded | Path | /tmp/EvilBinary| +| file_to_pad | Path of binary to be padded | Path | /tmp/evil-binary| #### Run it with `sh`! ``` -md5sum #{binary_to_pad} -dd if=/dev/zero bs=1 count=1 >> #{binary_to_pad} -md5sum #{binary_to_pad} +dd if=/dev/zero bs=1 count=1 >> #{file_to_pad} ```
diff --git a/atomics/index.yaml b/atomics/index.yaml index 317d95b1..2ca40d75 100644 --- a/atomics/index.yaml +++ b/atomics/index.yaml @@ -4086,16 +4086,15 @@ defense-evasion: - macos - linux input_arguments: - binary_to_pad: + file_to_pad: description: Path of binary to be padded type: Path - default: "/tmp/EvilBinary" + default: "/tmp/evil-binary" executor: name: sh - command: | - md5sum #{binary_to_pad} - dd if=/dev/zero bs=1 count=1 >> #{binary_to_pad} - md5sum #{binary_to_pad} + command: 'dd if=/dev/zero bs=1 count=1 >> #{file_to_pad} + +' T1088: technique: id: attack-pattern--ca1a3f50-5ebd-41f8-8320-2c7d6a6e88be