mirror of
https://github.com/LOLBAS-Project/LOLBAS
synced 2025-07-27 12:42:19 +02:00
@@ -4,8 +4,8 @@ Description: Debugging tool included with Windows Debugging Tools.
|
||||
Author: Oddvar Moe
|
||||
Created: 2018-05-25
|
||||
Commands:
|
||||
- Command: cdb.exe -cf x64_calc.wds -o notepad.exe
|
||||
Description: Launch 64-bit shellcode from the x64_calc.wds file using cdb.exe.
|
||||
- Command: cdb.exe -cf {PATH:.wds} -o notepad.exe
|
||||
Description: Launch 64-bit shellcode from the specified .wds file using cdb.exe.
|
||||
Usecase: Local execution of assembly shellcode.
|
||||
Category: Execute
|
||||
Privileges: User
|
||||
@@ -14,8 +14,8 @@ Commands:
|
||||
Tags:
|
||||
- Execute: Shellcode
|
||||
- Command: |
|
||||
cdb.exe -pd -pn <process_name>
|
||||
.shell <cmd>
|
||||
cdb.exe -pd -pn {process_name}
|
||||
.shell {CMD}
|
||||
Description: Attaching to any process and executing shell commands.
|
||||
Usecase: Run a shell command under a trusted Microsoft signed binary
|
||||
Category: Execute
|
||||
@@ -24,7 +24,7 @@ Commands:
|
||||
OperatingSystem: Windows
|
||||
Tags:
|
||||
- Execute: CMD
|
||||
- Command: cdb.exe -c C:\debug-script.txt calc
|
||||
- Command: cdb.exe -c {PATH:.txt} "{CMD}"
|
||||
Description: Execute arbitrary commands and binaries using a debugging script (see Resources section for a sample file).
|
||||
Usecase: Run commands under a trusted Microsoft signed binary
|
||||
Category: Execute
|
||||
|
Reference in New Issue
Block a user