mirror of
https://github.com/LOLBAS-Project/LOLBAS
synced 2024-12-25 14:29:24 +01:00
Failed to RTFM -- removed .md, added .yml
This commit is contained in:
parent
852f395f86
commit
31d7b4aa77
@ -1,24 +0,0 @@
|
||||
## schtasks.exe
|
||||
|
||||
* Functions: Execute, Persistence
|
||||
|
||||
```
|
||||
schtasks /create /sc minute /mo 1 /tn "Reverse shell" /tr c:\some\directory\revshell.exe
|
||||
```
|
||||
|
||||
Acknowledgements:
|
||||
*
|
||||
|
||||
Code sample:
|
||||
*
|
||||
|
||||
Resources:
|
||||
* https://isc.sans.edu/forums/diary/Adding+Persistence+Via+Scheduled+Tasks/23633/
|
||||
|
||||
Full path:
|
||||
```
|
||||
c:\windows\system32\schtasks.exe
|
||||
```
|
||||
|
||||
Notes:
|
||||
Create a recurring task to provide persistence, eg. to start a reverse shell
|
22
yml/OSBinaries/Schtasks.yml
Normal file
22
yml/OSBinaries/Schtasks.yml
Normal file
@ -0,0 +1,22 @@
|
||||
---
|
||||
Name: Schtasks.exe
|
||||
Description: Schedule periodic tasks
|
||||
Author: 'Ossi Vaananen'
|
||||
Created: '2018-10-24'
|
||||
Commands:
|
||||
- Command: schtasks /create /sc minute /mo 1 /tn "Reverse shell" /tr c:\some\directory\revshell.exe
|
||||
Description: Create a recurring task to execute every minute.
|
||||
Usecase: Create a recurring task, to eg. to keep reverse shell session(s) alive
|
||||
Category: Persistence
|
||||
Privileges: User
|
||||
OperatingSystem: Windows
|
||||
Full Path:
|
||||
- Path: c:\windows\system32\schtasks.exe
|
||||
Code Sample:
|
||||
- Code:
|
||||
Resources:
|
||||
- Link: https://isc.sans.edu/forums/diary/Adding+Persistence+Via+Scheduled+Tasks/23633/
|
||||
Acknowledgement:
|
||||
- Person: Ossi Vaananen
|
||||
Handle:
|
||||
---
|
Loading…
Reference in New Issue
Block a user