Tony M Lambert
4c0eab68c4
* Remove XSL tests from T1127 Trusted Dev Tools * Add T1220 XSL Script Processing * Added tests for T1220 WMIC XSL execution * fixed to pass spec
19 lines
491 B
YAML
19 lines
491 B
YAML
---
|
|
attack_technique: T1127
|
|
display_name: Trusted Developer Utilities
|
|
atomic_tests:
|
|
- name: MSBuild Bypass Using Inline Tasks
|
|
description: |
|
|
Executes the code in a project file using. C# Example
|
|
supported_platforms:
|
|
- windows
|
|
input_arguments:
|
|
filename:
|
|
description: Location of the project file
|
|
type: Path
|
|
default: T1127.csproj
|
|
executor:
|
|
name: command_prompt
|
|
command: |
|
|
C:\Windows\Microsoft.NET\Framework\v4.0.30319\msbuild.exe #{filename}
|