public-mirrors/LOLBAS
1
0
Fork 0
mirror of https://github.com/LOLBAS-Project/LOLBAS synced 2025-08-02 15:43:57 +02:00
Code Issues Projects Releases Wiki Activity

Standardise date formats (see https://yaml.org/type/timestamp.html)

Browse Source
This commit is contained in:
Wietze
2021-01-10 15:04:52 +00:00
parent de50a47957
commit 14dca38278
147 changed files with 407 additions and 407 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
yml/LOLUtilz/OSBinaries/Explorer.yml
View File

@@ -2,7 +2,7 @@
Name: Explorer.exe
Description: Execute
Author: ''
Created: '2018-05-25'
Created: 2018-05-25
Categories: []
Commands:
- Command: explorer.exe calc.exe

2
yml/LOLUtilz/OSBinaries/Netsh.yml
View File

@@ -2,7 +2,7 @@
Name: Netsh.exe
Description: Execute, Surveillance
Author: ''
Created: '2018-05-25'
Created: 2018-05-25
Categories: []
Commands:
- Command: |

2
yml/LOLUtilz/OSBinaries/Nltest.yml
View File

@@ -2,7 +2,7 @@
Name: Nltest.exe
Description: Credentials
Author: ''
Created: '2018-05-25'
Created: 2018-05-25
Categories: []
Commands:
- Command: nltest.exe /SERVER:192.168.1.10 /QUERY

2
yml/LOLUtilz/OSBinaries/Openwith.yml
View File

@@ -2,7 +2,7 @@
Name: Openwith.exe
Description: Execute
Author: ''
Created: '2018-05-25'
Created: 2018-05-25
Categories: []
Commands:
- Command: OpenWith.exe /c C:\test.hta

2
yml/LOLUtilz/OSBinaries/Powershell.yml
View File

@@ -2,7 +2,7 @@
Name: Powershell.exe
Description: Execute, Read ADS
Author: ''
Created: '2018-05-25'
Created: 2018-05-25
Categories: []
Commands:
- Command: powershell -ep bypass - < c:\temp:ttt

2
yml/LOLUtilz/OSBinaries/Psr.yml
View File

@@ -2,7 +2,7 @@
Name: Psr.exe
Description: Surveillance
Author: ''
Created: '2018-05-25'
Created: 2018-05-25
Categories: []
Commands:
- Command: psr.exe /start /gui 0 /output c:\users\user\out.zip

2
yml/LOLUtilz/OSBinaries/Robocopy.yml
View File

@@ -2,7 +2,7 @@
Name: Robocopy.exe
Description: Copy
Author: ''
Created: '2018-05-25'
Created: 2018-05-25
Categories: []
Commands:
- Command: Robocopy.exe C:\SourceFolder C:\DestFolder

2
yml/LOLUtilz/OtherBinaries/AcroRd32.yml
View File

@@ -2,7 +2,7 @@
Name: AcroRd32.exe
Description: Execute
Author: ''
Created: '2018-05-25'
Created: 2018-05-25
Categories: []
Commands:
- Command: Replace C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe by your binary

2
yml/LOLUtilz/OtherBinaries/Gpup.yml
View File

@@ -2,7 +2,7 @@
Name: Gpup.exe
Description: Execute
Author: ''
Created: '2018-05-25'
Created: 2018-05-25
Categories: []
Commands:
- Command: Gpup.exe -w whatever -e c:\Windows\System32\calc.exe

2
yml/LOLUtilz/OtherBinaries/Nlnotes.yml
View File

@@ -2,7 +2,7 @@
Name: Nlnotes.exe
Description: Execute
Author: ''
Created: '2018-05-25'
Created: 2018-05-25
Categories: []
Commands:
- Command: NLNOTES.EXE /authenticate "=N:\Lotus\Notes\Data\notes.ini" -Command if((Get-ExecutionPolicy ) -ne AllSigned) { Set-ExecutionPolicy -Scope Process Bypass }

2
yml/LOLUtilz/OtherBinaries/Notes.yml
View File

@@ -2,7 +2,7 @@
Name: Notes.exe
Description: Execute
Author: ''
Created: '2018-05-25'
Created: 2018-05-25
Categories: []
Commands:
- Command: Notes.exe "=N:\Lotus\Notes\Data\notes.ini" -Command if((Get-ExecutionPolicy) -ne AllSigned) { Set-ExecutionPolicy -Scope Process Bypass }

2
yml/LOLUtilz/OtherBinaries/Nvudisp.yml
View File

@@ -2,7 +2,7 @@
Name: Nvudisp.exe
Description: Execute, Copy, Add registry, Create shortcut, kill process
Author: ''
Created: '2018-05-25'
Created: 2018-05-25
Categories: []
Commands:
- Command: Nvudisp.exe System calc.exe

2
yml/LOLUtilz/OtherBinaries/Nvuhda6.yml
View File

@@ -2,7 +2,7 @@
Name: Nvuhda6.exe
Description: Execute, Copy, Add registry, Create shortcut, kill process
Author: ''
Created: '2018-05-25'
Created: 2018-05-25
Categories: []
Commands:
- Command: nvuhda6.exe System calc.exe

2
yml/LOLUtilz/OtherBinaries/ROCCAT_Swarm.yml
View File

@@ -2,7 +2,7 @@
Name: ROCCAT_Swarm.exe
Description: Execute
Author: ''
Created: '2018-05-25'
Created: 2018-05-25
Categories: []
Commands:
- Command: Replace ROCCAT_Swarm_Monitor.exe with your binary.exe

2
yml/LOLUtilz/OtherBinaries/Setup.yml
View File

@@ -2,7 +2,7 @@
Name: Setup.exe
Description: Execute
Author: ''
Created: '2018-05-25'
Created: 2018-05-25
Categories: []
Commands:
- Command: Run Setup.exe

2
yml/LOLUtilz/OtherBinaries/Usbinst.yml
View File

@@ -2,7 +2,7 @@
Name: Usbinst.exe
Description: Execute
Author: ''
Created: '2018-05-25'
Created: 2018-05-25
Categories: []
Commands:
- Command: Usbinst.exe InstallHinfSection "DefaultInstall 128 c:\temp\calc.inf"

2
yml/LOLUtilz/OtherBinaries/VBoxDrvInst.yml
View File

@@ -2,7 +2,7 @@
Name: VBoxDrvInst.exe
Description: Persistence
Author: ''
Created: '2018-05-25'
Created: 2018-05-25
Categories: []
Commands:
- Command: VBoxDrvInst.exe driver executeinf c:\temp\calc.inf

4
yml/LOLUtilz/OtherMSBinaries/Winword.yml
View File

@@ -2,7 +2,7 @@
Name: winword.exe
Description: Document editor included with Microsoft Office.
Author: 'Oddvar Moe'
Created: '2018-05-25'
Created: 2018-05-25
Commands:
- Command: winword.exe /l dllfile.dll
Description: Launch DLL payload.
@@ -26,4 +26,4 @@ Acknowledgement:
Handle: '@@vysecurity'
- Person: Adam (Internals)
Handle: '@Hexacorn'
---
---

2
yml/LOLUtilz/OtherScripts/Testxlst.yml
View File

@@ -2,7 +2,7 @@
Name: testxlst.js
Description: Script included with Pywin32.
Author: 'Oddvar Moe'
Created: '2018-05-25'
Created: 2018-05-25
Commands:
- Command: cscript testxlst.js C:\test\test.xml c:\test\test.xls c:\test\test.out
Description: Test Jscript included in Python tool to perform XSL transform (for payload execution).