admin/FalconOpsLLC-goexec
1
0
Fork 0
mirror of https://github.com/FalconOpsLLC/goexec synced 2026-06-06 15:44:27 +00:00
Code Issues Packages Projects Releases Wiki Activity

break:dcom: make excel-* into subcmd: excel

Browse Source
This commit is contained in:
Bryan McNulty
2025-10-01 13:00:11 -05:00
parent 8b52e39c57
commit ef8d9764bf
1 changed files with 29 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
cmd/dcom.go
+29 -10
View File
@@ -23,8 +23,7 @@ func dcomCmdInit() {
dcomShellWindowsCmdInit()
dcomShellBrowserWindowCmdInit()
dcomHtafileCmdInit()
dcomExcelMacroCmdInit()
dcomExcelXllCmdInit()
dcomExcelCmdInit()
dcomVsDteCmdInit()
dcomCmd.PersistentFlags().AddFlagSet(defaultAuthFlags.Flags)
@@ -35,8 +34,7 @@ func dcomCmdInit() {
dcomShellWindowsCmd,
dcomShellBrowserWindowCmd,
dcomHtafileCmd,
dcomExcelMacroCmd,
dcomExcelXllCmd,
dcomExcelCmd,
dcomVsDteCmd,
)
}
@@ -165,6 +163,20 @@ func dcomVsDteCmdInit() {
dcomVsDteCmd.MarkFlagsMutuallyExclusive("vs-command", "out")
}
func dcomExcelCmdInit() {
dcomExcelCmd.PersistentFlags().AddFlagSet(defaultAuthFlags.Flags)
dcomExcelCmd.PersistentFlags().AddFlagSet(defaultLogFlags.Flags)
dcomExcelCmd.PersistentFlags().AddFlagSet(defaultNetRpcFlags.Flags)
cmdFlags[dcomExcelCmd] = []*flagSet{
defaultAuthFlags,
defaultLogFlags,
defaultNetRpcFlags,
}
dcomExcelMacroCmdInit()
dcomExcelXllCmdInit()
dcomExcelCmd.AddCommand(dcomExcelMacroCmd, dcomExcelXllCmd)
}
func dcomExcelXllCmdInit() {
dcomExcelXllExecFlags := newFlagSet("Execution")
dcomExcelXllExecFlags.Flags.StringVar(&dcomExcelXll.XllLocation, "xll", "", "XLL/DLL local or UNC `path`")
@@ -201,6 +213,13 @@ var (
Args: cobra.ArbitraryArgs,
}
dcomExcelCmd = &cobra.Command{
Use: "excel [method]",
Short: "Execute with the Excel.Application DCOM object",
Long: `Description:
The excel command uses the exposed Excel.Application DCOM object to gain remote execution using the specified method.`,
}
dcomMmcCmd = &cobra.Command{
Use: "mmc [target]",
Short: "Execute with the MMC20.Application DCOM object",
@@ -289,10 +308,10 @@ var (
}
dcomExcelMacroCmd = &cobra.Command{
Use: "excel-macro [target]",
Short: "Execute with the Excel.Application DCOM object by executing an Excel macro",
Use: "macro [target]",
Short: "Execute using Excel 4.0 macros (XLM)",
Long: `Description:
The excel-macro method uses the exposed Excel.Application DCOM object to call ExecuteExcel4Macro, thus executing
The macro method uses the exposed Excel.Application DCOM object to call ExecuteExcel4Macro, thus executing
XLM macros at will. This method requires that the remote host has Microsoft Excel installed.`,
Args: args(argsRpcClient("host", ""), argsOutput("smb"),
func(*cobra.Command, []string) error {
@@ -323,10 +342,10 @@ var (
}
dcomExcelXllCmd = &cobra.Command{
Use: "excel-xll [target]",
Short: "Execute with the Excel.Application DCOM object by registering an XLL add-in",
Use: "xll [target]",
Short: "Execute by Loading an XLL add-in",
Long: `Description:
The excel-xll method uses the exposed Excel.Application DCOM object to call RegisterXLL, thus loading a XLL/DLL.
The xll method uses the exposed Excel.Application DCOM object to call RegisterXLL, thus loading a XLL/DLL.
The XLL location (--xll) can be a path on the remote filesystem or an UNC path. This method requires that the
remote host has Microsoft Excel installed.`,
Args: args(argsRpcClient("host", "")),