security-tools/atomic-red-team
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
6,538 Commits 47 Branches 0 Tags
python_conversion
Commit Graph

5173 Commits

Author SHA1 Message Date
chris 3426113b0b T1053.006 added two transient systemd tests 2021-11-09 16:41:47 +00:00
Sebastian Reitenbach 39981d6ae9 This one is even better, no need for ln -s /usr/bin/python3 /usr/bin/python 
taken from T1003.007-2
 2021-11-04 14:21:47 +01:00
Sebastian Reitenbach e17fea0cb5 fix T1059.006 tests 1-3 
which_python is only set in the prereq_command, but not in the
actual command to run the test, therefore it doesn't find python
 2021-11-04 12:57:05 +01:00
CircleCI Atomic Red Team doc generator 717757d539 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-11-03 18:57:08 +00:00
CircleCI Atomic Red Team GUID generator 50a76a233c Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-11-03 18:57:03 +00:00
Bhavin Patel ed2b816a10 Merge branch 'master' into pr-domain-trust-modif 2021-11-03 11:56:08 -07:00
CircleCI Atomic Red Team doc generator 89a486294b Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-11-01 15:00:11 +00:00
Carrie Roberts 8b443270f5 Use environment variable to resolve domain (#1654) 2021-11-01 08:59:26 -06:00
CircleCI Atomic Red Team doc generator 276f5e6fc9 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-11-01 14:33:32 +00:00
JoustingZebra decc37d1dc Fix for MSXSL dependency issues 
Added:

Fixes for "MSXSL Bypass using remote files"
T1220/bin/ folder for default msxsl.exe filepath.
Input argument for filepath to msxls.exe
Cleanup command to remove msxls.exe 
Capitalization fixes for "-ErrorAction Ignore"
Fixed spelling "successfully" on line 10, 60, and 121.
Split line 57 to get length under 150 characters.
 2021-10-29 18:18:18 -04:00
JoustingZebra acd76a17a3 Create .gitignore 
gitignore for /bin/ folder
 2021-10-29 16:54:25 -04:00
JoustingZebra 2ae946496a Delete .gitignore 2021-10-29 16:53:02 -04:00
JoustingZebra 6c4af49f59 Create .gitignore 2021-10-29 16:51:57 -04:00
JoustingZebra fadc563c96 Delete atomics/T1220/bin. directory 2021-10-29 16:51:42 -04:00
JoustingZebra 3ce7e7909a Create .gitignore 2021-10-29 16:51:23 -04:00
CircleCI Atomic Red Team doc generator 3c8cc63c7c Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-10-29 01:13:24 +00:00
tlor89 da09158d35 T1087.001-update (#1658) 
Co-authored-by: Toua Lor <tlor@nti.local>
 2021-10-28 19:12:47 -06:00
Arun 29824b76d5 T1124 - Get system date time in macOS using shell 2021-10-28 19:24:28 +05:30
CircleCI Atomic Red Team doc generator 776224b7d3 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-10-25 20:55:47 +00:00
CircleCI Atomic Red Team GUID generator d5265e52f5 Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-10-25 20:55:42 +00:00
Rimsha3108 69c06b9086 Adding ConfigSecurityPolicy Exfil (#1656) 2021-10-25 14:55:19 -06:00
CircleCI Atomic Red Team doc generator 1bd61011ca Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-10-21 20:42:25 +00:00
CircleCI Atomic Red Team GUID generator 008a484545 Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-10-21 20:42:20 +00:00
Michael Haag 5906bbec70 T1105 - Curl for Windows (#1653) 
* T1105 - Curl for Windows

* Update T1105.yaml

* ignore cleanup errors

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
 2021-10-21 14:41:48 -06:00
CircleCI Atomic Red Team doc generator e01633ef52 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-10-18 19:57:23 +00:00
Antoine Cauchois 05cc3b2ba0 Fix T1110.003 quote usage in PowerShell (#1651) 
In PowerShell, special characters are interpreted in double quotes. By using a single quote, the password won't change.
 2021-10-18 13:56:48 -06:00
CircleCI Atomic Red Team doc generator a99296a770 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-10-18 17:07:32 +00:00
CircleCI Atomic Red Team GUID generator b9b6e708c3 Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-10-18 17:07:27 +00:00
Michael Haag 055f2b03e4 ServicePrincipleName Gathering T1558.003 (#1648) 
* ServicePrincipleName Gathering

* Fixes

* Update T1558.003.yaml

* Update T1558.003.yaml
 2021-10-18 11:07:06 -06:00
CircleCI Atomic Red Team doc generator 21bffa7a69 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-10-18 14:55:17 +00:00
Clément Notin 067187c3ba T1569.002: fix spelling (#1650) 2021-10-18 08:54:54 -06:00
CircleCI Atomic Red Team doc generator 61901c7089 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-10-15 23:15:04 +00:00
Jose Enrique Hernandez 5ca0cd8717 rebuilt T1027.yml (#1649) 
* just added dasta

* adding yaml

* fixing yaml

* maintain desc spacing

* keep original spacing

* spacing

* spacing

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
 2021-10-15 17:14:30 -06:00
Carrie Roberts b8460f5d6a Merge branch 'master' into pr-domain-trust-modif 2021-10-15 14:14:32 -06:00
Vincent N cc313367cd Add missing quotes in wmic forgotten in fdf942f (#1645) 
Quoting wmic node option prevents the command from failing when the destination node dns name contains a hyphen

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
 2021-10-15 14:11:17 -06:00
CircleCI Atomic Red Team GUID generator e0add88f40 Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-10-15 15:15:27 +00:00
devapriya16 80ac90e341 T1021.001_Update (#1647) 
Co-authored-by: Priya <dpriya@NTI.local>
Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
 2021-10-15 09:14:57 -06:00
CircleCI Atomic Red Team GUID generator d130f2d97e Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-10-15 15:13:17 +00:00
Wietze 9282894485 T1027: Add generic Command-Line Obfuscation (#1646) 
* T1027: Add generic command-line obfuscation

* remove guid so a new one will be auto-assigned

Co-authored-by: Wietze <wietze.beukema@pwc.com>
Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
 2021-10-15 09:12:44 -06:00
CircleCI Atomic Red Team doc generator 54ce1cb32b Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-10-08 15:29:42 +00:00
forensictdev a563f57e9a Add spanish support to test (#1644) 
* Add spanish support to test

* Add quotes to localgroup name

Co-authored-by: gabofcg <gabelo005@gmail.com>
Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
 2021-10-08 09:29:00 -06:00
CircleCI Atomic Red Team doc generator 47bfc55de6 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-10-08 15:27:30 +00:00
CircleCI Atomic Red Team GUID generator 814fe5c75d Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-10-08 15:27:25 +00:00
Vincent N 5798ea786a T1003.003 Add remote Shadow Copy creation over wmi (#1640) 
* Add remote Shadow Copy creation over wmi

* Add quotes for wmic node

Quoting wmic node option prevents the command from failing when the destination node dns name contains a hyphen

* Adjust default wmic parameters to run locally
 2021-10-08 09:26:53 -06:00
CircleCI Atomic Red Team doc generator 985f0a446a Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-10-08 02:02:54 +00:00
JoustingZebra e3b1ecdae4 Fixed missing dependency (msxsl.exe) (#1642) 
Added missing dependency (msxsl.exe)

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
 2021-10-07 20:02:28 -06:00
CircleCI Atomic Red Team doc generator e5de126fd6 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-10-08 01:58:39 +00:00
CircleCI Atomic Red Team GUID generator 311de56693 Generate GUIDs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-10-08 01:58:34 +00:00
devapriya16 dc251e8ee5 RDP on Non Standdard Port (#1643) 
Co-authored-by: Priya <dpriya@NTI.local>
 2021-10-07 19:58:04 -06:00
CircleCI Atomic Red Team doc generator 57bf589ab7 Generate docs from job=generate_and_commit_guids_and_docs branch=master [skip ci] 2021-10-01 14:37:22 +00:00