JB
20 lines
551 B
YAML
20 lines
551 B
YAML
---
|
|
attack_technique: T1127
|
|
display_name: Trusted Developer Utilities
|
|
atomic_tests:
|
|
- name: MSBuild Bypass Using Inline Tasks
|
|
description: |
|
|
Executes the code in a project file using. C# Example
|
|
supported_platforms:
|
|
- windows
|
|
input_arguments:
|
|
filename:
|
|
description: Location of the project file
|
|
type: Path
|
|
default: PathToAtomicsFolder\T1127\src\T1127.csproj
|
|
executor:
|
|
name: command_prompt
|
|
elevation_required: false
|
|
command: |
|
|
C:\Windows\Microsoft.NET\Framework\v4.0.30319\msbuild.exe #{filename}
|