diff --git a/atomics/T1050/T1050.md b/atomics/T1050/T1050.md index f1721949..e25b8a6f 100644 --- a/atomics/T1050/T1050.md +++ b/atomics/T1050/T1050.md @@ -37,10 +37,14 @@ Installs A Local Service | Name | Description | Type | Default Value | |------|-------------|------|---------------| | binary_path | Name of the service binary, include path. | Path | C:\AtomicRedTeam\atomics\T1050\bin\AtomicService.exe| +| service_name | Name of the Service | String | AtomicTestService| #### Run it with `command_prompt`! ``` -sc.exe create AtomicTestService binPath= #{binary_path} +sc.exe create #{service_name} binPath= #{binary_path} +sc.exe start #{service_name} +sc.exe stop #{service_name} +sc.exe delete #{service_name} ```

@@ -55,9 +59,13 @@ Installs A Local Service via PowerShell | Name | Description | Type | Default Value | |------|-------------|------|---------------| | binary_path | Name of the service binary, include path. | Path | C:\AtomicRedTeam\atomics\T1050\bin\AtomicService.exe| +| service_name | Name of the Service | String | AtomicTestService| #### Run it with `powershell`! ``` -powershell.exe New-Service -Name "AtomicTestService" -BinaryPathName "#{binary_path}" +New-Service -Name "#{service_name}" -BinaryPathName "#{binary_path}" +Start-Service -Name "#{service_name}" +Stop-Service -Name "#{service_name}" +(Get-WmiObject Win32_Service -filter "name='#{service_name}'").Delete() ```