From 692a3bf4c2b9efe2bb9b4de467bc56f6059e5152 Mon Sep 17 00:00:00 2001 From: Elliot Killick Date: Thu, 26 Aug 2021 12:49:43 -0400 Subject: [PATCH] Remove .exe from command and increase specificity --- yml/OSBinaries/WorkFolders.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/yml/OSBinaries/WorkFolders.yml b/yml/OSBinaries/WorkFolders.yml index 564af66..2f34799 100644 --- a/yml/OSBinaries/WorkFolders.yml +++ b/yml/OSBinaries/WorkFolders.yml @@ -4,8 +4,8 @@ Description: Work Folders Author: 'Elliot Killick' Created: '2021-08-16' Commands: - - Command: WorkFolders.exe - Description: Execute control.exe in the current directory + - Command: WorkFolders + Description: Execute control.exe in the current working directory Usecase: Can be used to evade defensive countermeasures or to hide as a persistence mechanism Category: Execute Privileges: User