mirror of
https://github.com/LOLBAS-Project/LOLBAS
synced 2024-12-26 06:49:09 +01:00
Failed to RTFM -- removed .md, added .yml
This commit is contained in:
parent
852f395f86
commit
31d7b4aa77
@ -1,24 +0,0 @@
|
|||||||
## schtasks.exe
|
|
||||||
|
|
||||||
* Functions: Execute, Persistence
|
|
||||||
|
|
||||||
```
|
|
||||||
schtasks /create /sc minute /mo 1 /tn "Reverse shell" /tr c:\some\directory\revshell.exe
|
|
||||||
```
|
|
||||||
|
|
||||||
Acknowledgements:
|
|
||||||
*
|
|
||||||
|
|
||||||
Code sample:
|
|
||||||
*
|
|
||||||
|
|
||||||
Resources:
|
|
||||||
* https://isc.sans.edu/forums/diary/Adding+Persistence+Via+Scheduled+Tasks/23633/
|
|
||||||
|
|
||||||
Full path:
|
|
||||||
```
|
|
||||||
c:\windows\system32\schtasks.exe
|
|
||||||
```
|
|
||||||
|
|
||||||
Notes:
|
|
||||||
Create a recurring task to provide persistence, eg. to start a reverse shell
|
|
22
yml/OSBinaries/Schtasks.yml
Normal file
22
yml/OSBinaries/Schtasks.yml
Normal file
@ -0,0 +1,22 @@
|
|||||||
|
---
|
||||||
|
Name: Schtasks.exe
|
||||||
|
Description: Schedule periodic tasks
|
||||||
|
Author: 'Ossi Vaananen'
|
||||||
|
Created: '2018-10-24'
|
||||||
|
Commands:
|
||||||
|
- Command: schtasks /create /sc minute /mo 1 /tn "Reverse shell" /tr c:\some\directory\revshell.exe
|
||||||
|
Description: Create a recurring task to execute every minute.
|
||||||
|
Usecase: Create a recurring task, to eg. to keep reverse shell session(s) alive
|
||||||
|
Category: Persistence
|
||||||
|
Privileges: User
|
||||||
|
OperatingSystem: Windows
|
||||||
|
Full Path:
|
||||||
|
- Path: c:\windows\system32\schtasks.exe
|
||||||
|
Code Sample:
|
||||||
|
- Code:
|
||||||
|
Resources:
|
||||||
|
- Link: https://isc.sans.edu/forums/diary/Adding+Persistence+Via+Scheduled+Tasks/23633/
|
||||||
|
Acknowledgement:
|
||||||
|
- Person: Ossi Vaananen
|
||||||
|
Handle:
|
||||||
|
---
|
Loading…
Reference in New Issue
Block a user