mirror of
https://github.com/maxDcb/C2Core
synced 2026-06-08 15:48:01 +00:00
Maxime dcb
108a370807
* CommandSpecs * CommandSpecs * feat(command-specs): add simple module specs * listModule * AssemblyExec * AssemblyExecTests * Minor * Inject * InjectTests * Spec modules * Folder layout * upload & download * Chisel Minidump Powershell & Script * CoffLoader DotnetExec /KerberosUseTicket PsExec PwSh ScreenShot * add artifact_filters * Minor * stabilisation * Fixes * manual test * manual test * manual test * manual test * manual test * manual test * manual test * manual test * ScreenShot png * socks5 hostname * Maj for AI * minor
55 lines
1.4 KiB
JSON
55 lines
1.4 KiB
JSON
{
|
|
"name": "powershell",
|
|
"display_name": "powershell",
|
|
"kind": "module",
|
|
"description": "Execute a PowerShell command, import a script module, or run a TeamServer-managed script artifact.",
|
|
"command_template": "powershell [-i {i:q}] [-s {s:q}] {command:raw?}",
|
|
"target": "beacon",
|
|
"requires_session": true,
|
|
"platforms": ["windows"],
|
|
"archs": ["x86", "x64", "arm64"],
|
|
"args": [
|
|
{
|
|
"name": "-i",
|
|
"type": "flag",
|
|
"required": false,
|
|
"description": "Import a PowerShell script artifact as a module.",
|
|
"artifact_filter": {
|
|
"category": "script",
|
|
"scope": "server",
|
|
"target": "beacon",
|
|
"platform": "windows",
|
|
"runtime": "powershell",
|
|
"name_contains": ".ps1"
|
|
}
|
|
},
|
|
{
|
|
"name": "-s",
|
|
"type": "flag",
|
|
"required": false,
|
|
"description": "Run a PowerShell script artifact.",
|
|
"artifact_filter": {
|
|
"category": "script",
|
|
"scope": "server",
|
|
"target": "beacon",
|
|
"platform": "windows",
|
|
"runtime": "powershell",
|
|
"name_contains": ".ps1"
|
|
}
|
|
},
|
|
{
|
|
"name": "command",
|
|
"type": "text",
|
|
"required": false,
|
|
"description": "Inline PowerShell command.",
|
|
"variadic": true
|
|
}
|
|
],
|
|
"examples": [
|
|
"powershell whoami | write-output",
|
|
"powershell -i PowerView.ps1",
|
|
"powershell -s collect.ps1"
|
|
],
|
|
"source": "manifest"
|
|
}
|