caseysmithrc
13 lines
415 B
Markdown
13 lines
415 B
Markdown
## Trusted Developer Utilities
|
|
|
|
MITRE ATT&CK Technique: [T1127](https://attack.mitre.org/wiki/Technique/T1127)
|
|
|
|
### MSBuild.exe - [Inline Tasks](https://msdn.microsoft.com/en-us/library/dd722601.aspx)
|
|
|
|
C:\Windows\Microsoft.Net\Framework\v4.0.30319\MSBuild.exe File.csproj
|
|
|
|
## Test Script
|
|
|
|
[MSBuildBypass.csproj](https://github.com/redcanaryco/atomic-red-team/blob/master/Windows/Payloads/MSBuildBypass.csproj)
|
|
|