public-mirrors/LOLBAS
1
0
Fork 0
mirror of https://github.com/LOLBAS-Project/LOLBAS synced 2024-12-25 14:29:24 +01:00
Code Issues Projects Releases Wiki Activity

Remove .exe from command and increase specificity

Browse Source
This commit is contained in:
Elliot Killick 2021-08-26 12:07:04 -04:00
parent 26a15f55cf
commit 084fb83984
No known key found for this signature in database
GPG Key ID: F9B90D44F83DD5F2
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
yml/OSBinaries/OfflineScannerShell.yml
View File

@ -4,8 +4,8 @@ Description: Windows Defender Offline Shell
Author: 'Elliot Killick'
Created: '2021-08-16'
Commands:
- Command: OfflineScannerShell.exe
Description: Execute mpclient.dll library in the current directory
- Command: OfflineScannerShell
Description: Execute mpclient.dll library in the current working directory
Usecase: Can be used to evade defensive countermeasures or to hide as a persistence mechanism
Category: Execute
Privileges: Administrator