mirror of
https://github.com/maxDcb/C2Core
synced 2026-06-08 15:48:01 +00:00
Maxime dcb
108a370807
* CommandSpecs * CommandSpecs * feat(command-specs): add simple module specs * listModule * AssemblyExec * AssemblyExecTests * Minor * Inject * InjectTests * Spec modules * Folder layout * upload & download * Chisel Minidump Powershell & Script * CoffLoader DotnetExec /KerberosUseTicket PsExec PwSh ScreenShot * add artifact_filters * Minor * stabilisation * Fixes * manual test * manual test * manual test * manual test * manual test * manual test * manual test * manual test * ScreenShot png * socks5 hostname * Maj for AI * minor
67 lines
1.7 KiB
JSON
67 lines
1.7 KiB
JSON
{
|
|
"name": "dcomExec",
|
|
"display_name": "dcomExec",
|
|
"kind": "module",
|
|
"description": "Execute a command on a remote Windows host through DCOM.",
|
|
"command_template": "dcomExec -h {h:q} -c {c:q} [-a {a:q}] [-w {w:q}] [-k {k:q}] [-u {u:q}] [-p {p:q}] [-n {n:flag}]",
|
|
"target": "beacon",
|
|
"requires_session": true,
|
|
"platforms": ["windows"],
|
|
"archs": ["x86", "x64", "arm64"],
|
|
"args": [
|
|
{
|
|
"name": "-h",
|
|
"type": "flag",
|
|
"required": true,
|
|
"description": "Remote host name or IP."
|
|
},
|
|
{
|
|
"name": "-c",
|
|
"type": "flag",
|
|
"required": true,
|
|
"description": "Executable or command to start remotely."
|
|
},
|
|
{
|
|
"name": "-a",
|
|
"type": "flag",
|
|
"required": false,
|
|
"description": "Arguments passed to the remote command."
|
|
},
|
|
{
|
|
"name": "-w",
|
|
"type": "flag",
|
|
"required": false,
|
|
"description": "Remote working directory."
|
|
},
|
|
{
|
|
"name": "-k",
|
|
"type": "flag",
|
|
"required": false,
|
|
"description": "Kerberos SPN, for example HOST/server.domain."
|
|
},
|
|
{
|
|
"name": "-u",
|
|
"type": "flag",
|
|
"required": false,
|
|
"description": "Username for explicit credentials."
|
|
},
|
|
{
|
|
"name": "-p",
|
|
"type": "flag",
|
|
"required": false,
|
|
"description": "Password for explicit credentials."
|
|
},
|
|
{
|
|
"name": "-n",
|
|
"type": "flag",
|
|
"required": false,
|
|
"description": "Use no password/current credential behavior."
|
|
}
|
|
],
|
|
"examples": [
|
|
"dcomExec -h fileserver -c cmd.exe -a \"/c whoami\"",
|
|
"dcomExec -h fileserver -k HOST/fileserver.domain -u DOMAIN\\user -p Passw0rd -c cmd.exe -a \"/c whoami\""
|
|
],
|
|
"source": "manifest"
|
|
}
|