mirror of
https://github.com/maxDcb/C2Core
synced 2026-06-08 15:48:01 +00:00
Maxime dcb
108a370807
* CommandSpecs * CommandSpecs * feat(command-specs): add simple module specs * listModule * AssemblyExec * AssemblyExecTests * Minor * Inject * InjectTests * Spec modules * Folder layout * upload & download * Chisel Minidump Powershell & Script * CoffLoader DotnetExec /KerberosUseTicket PsExec PwSh ScreenShot * add artifact_filters * Minor * stabilisation * Fixes * manual test * manual test * manual test * manual test * manual test * manual test * manual test * manual test * ScreenShot png * socks5 hostname * Maj for AI * minor
71 lines
1.9 KiB
JSON
71 lines
1.9 KiB
JSON
{
|
|
"name": "psExec",
|
|
"display_name": "psExec",
|
|
"kind": "module",
|
|
"description": "Copy and run a service executable on a remote Windows host. The service executable is resolved from Tools first, then UploadedArtifacts.",
|
|
"command_template": "psExec {auth_mode} {username:q?} {password:q?} {target:q} {service_artifact:q}",
|
|
"target": "beacon",
|
|
"requires_session": true,
|
|
"platforms": ["windows"],
|
|
"archs": ["x86", "x64", "arm64"],
|
|
"args": [
|
|
{
|
|
"name": "auth_mode",
|
|
"type": "enum",
|
|
"required": true,
|
|
"description": "Authentication mode.",
|
|
"values": ["-u", "-k", "-n"]
|
|
},
|
|
{
|
|
"name": "username",
|
|
"type": "text",
|
|
"required": false,
|
|
"description": "DOMAIN\\Username for -u mode."
|
|
},
|
|
{
|
|
"name": "password",
|
|
"type": "text",
|
|
"required": false,
|
|
"description": "Password for -u mode."
|
|
},
|
|
{
|
|
"name": "target",
|
|
"type": "text",
|
|
"required": true,
|
|
"description": "Target host name or IP."
|
|
},
|
|
{
|
|
"name": "service_artifact",
|
|
"type": "artifact",
|
|
"required": true,
|
|
"description": "Service executable artifact from Tools or UploadedArtifacts.",
|
|
"artifact_filters": [
|
|
{
|
|
"category": "tool",
|
|
"scope": "server",
|
|
"target": "teamserver",
|
|
"platform": "windows",
|
|
"arch": "session.arch",
|
|
"runtime": "any",
|
|
"name_contains": ".exe"
|
|
},
|
|
{
|
|
"category": "upload",
|
|
"scope": "operator",
|
|
"target": "beacon",
|
|
"platform": "session.platform",
|
|
"arch": "session.arch",
|
|
"runtime": "file",
|
|
"name_contains": ".exe"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"examples": [
|
|
"psExec -u DOMAIN\\Username Password123! fileserver service.exe",
|
|
"psExec -k fileserver service.exe",
|
|
"psExec -n fileserver service.exe"
|
|
],
|
|
"source": "manifest"
|
|
}
|