public-mirrors/LOLBAS
1
0
Fork 0
mirror of https://github.com/LOLBAS-Project/LOLBAS synced 2024-12-29 00:08:11 +01:00
Code Issues Projects Releases Wiki Activity

Update Cdb.yml Tags

Browse Source 
Added Tags:
Execute: CMD
Execute: Shellcode
This commit is contained in:
hegusung 2024-10-13 21:42:37 +02:00 committed by GitHub
parent 351a3bcac6
commit 37eaa488d1
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
yml/OtherMSBinaries/Cdb.yml
View File

@ -11,6 +11,8 @@ Commands:
Privileges: User Privileges: User
MitreID: T1127 MitreID: T1127
OperatingSystem: Windows OperatingSystem: Windows
Tags:
- Execute: Shellcode
- Command: | - Command: |
cdb.exe -pd -pn <process_name> cdb.exe -pd -pn <process_name>
.shell <cmd> .shell <cmd>
@ -20,6 +22,8 @@ Commands:
Privileges: User Privileges: User
MitreID: T1127 MitreID: T1127
OperatingSystem: Windows OperatingSystem: Windows
Tags:
- Execute: CMD
- Command: cdb.exe -c C:\debug-script.txt calc - Command: cdb.exe -c C:\debug-script.txt calc
Description: Execute arbitrary commands and binaries using a debugging script (see Resources section for a sample file). Description: Execute arbitrary commands and binaries using a debugging script (see Resources section for a sample file).
Usecase: Run commands under a trusted Microsoft signed binary Usecase: Run commands under a trusted Microsoft signed binary
@ -27,6 +31,8 @@ Commands:
Privileges: User Privileges: User
MitreID: T1127 MitreID: T1127
OperatingSystem: Windows OperatingSystem: Windows
Tags:
- Execute: CMD
Full_Path: Full_Path:
- Path: C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\cdb.exe - Path: C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\cdb.exe
- Path: C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\cdb.exe - Path: C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\cdb.exe