mirror of
https://github.com/LOLBAS-Project/LOLBAS
synced 2025-08-02 15:43:57 +02:00
Remove/fix unnecessary Categories field
This commit is contained in:
@@ -3,7 +3,6 @@ Name: AcroRd32.exe
|
||||
Description: Execute
|
||||
Author: ''
|
||||
Created: 2018-05-25
|
||||
Categories: []
|
||||
Commands:
|
||||
- Command: Replace C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe by your binary
|
||||
Description: Hijack RdrCEF.exe with a payload executable to launch when opening Adobe
|
||||
|
@@ -3,7 +3,6 @@ Name: Gpup.exe
|
||||
Description: Execute
|
||||
Author: ''
|
||||
Created: 2018-05-25
|
||||
Categories: []
|
||||
Commands:
|
||||
- Command: Gpup.exe -w whatever -e c:\Windows\System32\calc.exe
|
||||
Description: Execute another command through gpup.exe (Notepad++ binary).
|
||||
|
@@ -3,7 +3,6 @@ Name: Nlnotes.exe
|
||||
Description: Execute
|
||||
Author: ''
|
||||
Created: 2018-05-25
|
||||
Categories: []
|
||||
Commands:
|
||||
- Command: NLNOTES.EXE /authenticate "=N:\Lotus\Notes\Data\notes.ini" -Command if((Get-ExecutionPolicy ) -ne AllSigned) { Set-ExecutionPolicy -Scope Process Bypass }
|
||||
Description: Run PowerShell via LotusNotes.
|
||||
|
@@ -3,7 +3,6 @@ Name: Notes.exe
|
||||
Description: Execute
|
||||
Author: ''
|
||||
Created: 2018-05-25
|
||||
Categories: []
|
||||
Commands:
|
||||
- Command: Notes.exe "=N:\Lotus\Notes\Data\notes.ini" -Command if((Get-ExecutionPolicy) -ne AllSigned) { Set-ExecutionPolicy -Scope Process Bypass }
|
||||
Description: Run PowerShell via LotusNotes.
|
||||
|
@@ -3,7 +3,6 @@ Name: Nvudisp.exe
|
||||
Description: Execute, Copy, Add registry, Create shortcut, kill process
|
||||
Author: ''
|
||||
Created: 2018-05-25
|
||||
Categories: []
|
||||
Commands:
|
||||
- Command: Nvudisp.exe System calc.exe
|
||||
Description: Execute calc.exe as a subprocess.
|
||||
|
@@ -3,7 +3,6 @@ Name: Nvuhda6.exe
|
||||
Description: Execute, Copy, Add registry, Create shortcut, kill process
|
||||
Author: ''
|
||||
Created: 2018-05-25
|
||||
Categories: []
|
||||
Commands:
|
||||
- Command: nvuhda6.exe System calc.exe
|
||||
Description: Execute calc.exe as a subprocess.
|
||||
|
@@ -3,7 +3,6 @@ Name: ROCCAT_Swarm.exe
|
||||
Description: Execute
|
||||
Author: ''
|
||||
Created: 2018-05-25
|
||||
Categories: []
|
||||
Commands:
|
||||
- Command: Replace ROCCAT_Swarm_Monitor.exe with your binary.exe
|
||||
Description: Hijack ROCCAT_Swarm_Monitor.exe and launch payload when executing ROCCAT_Swarm.exe
|
||||
|
@@ -3,7 +3,6 @@ Name: Setup.exe
|
||||
Description: Execute
|
||||
Author: ''
|
||||
Created: 2018-05-25
|
||||
Categories: []
|
||||
Commands:
|
||||
- Command: Run Setup.exe
|
||||
Description: Hijack hpbcsiServiceMarshaller.exe and run Setup.exe to launch a payload.
|
||||
|
@@ -3,7 +3,6 @@ Name: Usbinst.exe
|
||||
Description: Execute
|
||||
Author: ''
|
||||
Created: 2018-05-25
|
||||
Categories: []
|
||||
Commands:
|
||||
- Command: Usbinst.exe InstallHinfSection "DefaultInstall 128 c:\temp\calc.inf"
|
||||
Description: Execute calc.exe through DefaultInstall Section Directive in INF file.
|
||||
|
@@ -3,7 +3,6 @@ Name: VBoxDrvInst.exe
|
||||
Description: Persistence
|
||||
Author: ''
|
||||
Created: 2018-05-25
|
||||
Categories: []
|
||||
Commands:
|
||||
- Command: VBoxDrvInst.exe driver executeinf c:\temp\calc.inf
|
||||
Description: Set registry key-value for persistance via INF file call through VBoxDrvInst.exe
|
||||
|
Reference in New Issue
Block a user