1bfefdacfc
* provide elevation_required attribute * provide elevation_required attribute * provide elevation_required attribute
23 lines
502 B
YAML
23 lines
502 B
YAML
---
|
|
attack_technique: T1009
|
|
display_name: Binary Padding
|
|
|
|
atomic_tests:
|
|
- name: Pad Binary to Change Hash - Linux/macOS dd
|
|
description: |
|
|
Uses dd to add a zero to the binary to change the hash
|
|
|
|
supported_platforms:
|
|
- macos
|
|
- linux
|
|
input_arguments:
|
|
file_to_pad:
|
|
description: Path of binary to be padded
|
|
type: Path
|
|
default: /tmp/evil-binary
|
|
executor:
|
|
name: sh
|
|
elevation_required: false
|
|
command: |
|
|
dd if=/dev/zero bs=1 count=1 >> #{file_to_pad}
|