Skip to content

Commit

Permalink
fixes
Browse files Browse the repository at this point in the history
  • Loading branch information
op7ic committed Aug 3, 2018
1 parent 8912e8a commit 1f52d1f
Showing 1 changed file with 4 additions and 4 deletions.
8 changes: 4 additions & 4 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -27,12 +27,12 @@ The script executes calc.exe. You can replace this easily with metasploit execut
The following techniques are currently covered by this script:

| ATT&CK | LOLBAS | Invoke-CradleCrafter | Custom | Variants |
| ------------- | ------------- | ------------- | ------------- |
| ------------- | ------------- | ------------- | ------------- | ------------- |
| T1197 | msiexec.exe | MEMORY\PSWEBSTRING | winnt32 | bitsadmin regsrv32 |
| T1118 | diskshadow.exe | MEMORY\PSWEBDATA | winrs | manage-bde.wsf + rundll32 JS |
| T1170 | esentutl.exe | MEMORY\PSWEBOPENREAD | waitfor |
| T1086 | replace.exe | MEMORY\NETWEBSTRING | .SettingContent-ms file |
| T1121 | SyncAppvPublishingServer | MEMORY\NETWEBDATA |
| T1170 | esentutl.exe | MEMORY\PSWEBOPENREAD | waitfor | |
| T1086 | replace.exe | MEMORY\NETWEBSTRING | .SettingContent-ms file | |
| T1121 | SyncAppvPublishingServer | MEMORY\NETWEBDATA | |
| T1117 | hh.exe | MEMORY\NETWEBOPENREAD |
| T1127 | ieexec.exe | MEMORY\PSWEBREQUEST |
| T1047 | Setupapi | MEMORY\PSRESTMETHOD |
Expand Down

0 comments on commit 1f52d1f

Please sign in to comment.