mirror of
https://github.com/LOLBAS-Project/LOLBAS
synced 2024-12-27 15:28:34 +01:00
20 lines
500 B
Markdown
20 lines
500 B
Markdown
|
## SC.exe
|
||
|
|
* Functions: Execute, Read ADS, Create Service, Start Service
|
||
|
|
```
|
||
|
|
|
||
|
|
sc create evilservice binPath="\"c:\\ADS\\file.txt:cmd.exe\" /c echo works > \"c:\ADS\works.txt\"" DisplayName= "evilservice" start= auto
|
||
|
|
sc start evilservice
|
||
|
|
|
||
|
|
|
||
|
|
```
|
||
|
|
|
||
|
|
* Resources:
|
||
|
|
* https://oddvar.moe/2018/04/11/putting-data-in-alternate-data-streams-and-how-to-execute-it-part-2/
|
||
|
|
|
||
|
|
* Full path:
|
||
|
|
* C:\Windows\System32\sc.exe
|
||
|
|
* C:\Windows\SysWOW64\sc.exe
|
||
|
|
|
||
|
|
* Notes: Thanks to Oddvar Moe - @oddvarmoe
|
||
|
|
|