mirror of
https://github.com/maxDcb/C2Core
synced 2026-06-08 15:48:01 +00:00
Maxime dcb
108a370807
* CommandSpecs * CommandSpecs * feat(command-specs): add simple module specs * listModule * AssemblyExec * AssemblyExecTests * Minor * Inject * InjectTests * Spec modules * Folder layout * upload & download * Chisel Minidump Powershell & Script * CoffLoader DotnetExec /KerberosUseTicket PsExec PwSh ScreenShot * add artifact_filters * Minor * stabilisation * Fixes * manual test * manual test * manual test * manual test * manual test * manual test * manual test * manual test * ScreenShot png * socks5 hostname * Maj for AI * minor
67 lines
1.8 KiB
JSON
67 lines
1.8 KiB
JSON
{
|
|
"name": "taskScheduler",
|
|
"display_name": "taskScheduler",
|
|
"kind": "module",
|
|
"description": "Create and optionally run a scheduled task on a local or remote Windows host.",
|
|
"command_template": "taskScheduler -c {c:q} [-s {s:q}] [-t {t:q}] [-a {a:q}] [-u {u:q}] [-p {p:q}] [--no-run {no_run:flag}] [--nocleanup {nocleanup:flag}]",
|
|
"target": "beacon",
|
|
"requires_session": true,
|
|
"platforms": ["windows"],
|
|
"archs": ["x86", "x64", "arm64"],
|
|
"args": [
|
|
{
|
|
"name": "-c",
|
|
"type": "flag",
|
|
"required": true,
|
|
"description": "Executable or command to run in the scheduled task."
|
|
},
|
|
{
|
|
"name": "-s",
|
|
"type": "flag",
|
|
"required": false,
|
|
"description": "Target host. Omit for localhost."
|
|
},
|
|
{
|
|
"name": "-t",
|
|
"type": "flag",
|
|
"required": false,
|
|
"description": "Scheduled task name. A random name is used if omitted."
|
|
},
|
|
{
|
|
"name": "-a",
|
|
"type": "flag",
|
|
"required": false,
|
|
"description": "Command line arguments."
|
|
},
|
|
{
|
|
"name": "-u",
|
|
"type": "flag",
|
|
"required": false,
|
|
"description": "DOMAIN\\user for task registration."
|
|
},
|
|
{
|
|
"name": "-p",
|
|
"type": "flag",
|
|
"required": false,
|
|
"description": "Password for the provided user."
|
|
},
|
|
{
|
|
"name": "--no-run",
|
|
"type": "flag",
|
|
"required": false,
|
|
"description": "Register the task without running it."
|
|
},
|
|
{
|
|
"name": "--nocleanup",
|
|
"type": "flag",
|
|
"required": false,
|
|
"description": "Keep the task after it starts."
|
|
}
|
|
],
|
|
"examples": [
|
|
"taskScheduler -c C:\\Windows\\System32\\cmd.exe -a \"/c whoami\"",
|
|
"taskScheduler -s HOST -t UpdateTask -c C:\\Windows\\System32\\cmd.exe -a \"/c whoami\" --nocleanup"
|
|
],
|
|
"source": "manifest"
|
|
}
|