From 3ade74603f8c42d70afd6ee73d1127c199d910e5 Mon Sep 17 00:00:00 2001 From: enigma0x3 Date: Wed, 12 Aug 2015 18:48:12 -0400 Subject: [PATCH] Update schtasks.py fixed registry storage --- lib/modules/persistence/userland/schtasks.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lib/modules/persistence/userland/schtasks.py b/lib/modules/persistence/userland/schtasks.py index 8bbd76e..a9e36f2 100644 --- a/lib/modules/persistence/userland/schtasks.py +++ b/lib/modules/persistence/userland/schtasks.py @@ -59,7 +59,7 @@ class Module: 'RegPath' : { 'Description' : 'Registry location to store the script code. Last element is the key name.', 'Required' : False, - 'Value' : 'HKCU:\Software\Microsoft\Installer\debug' + 'Value' : 'HKCU:\Software\Microsoft\Windows\CurrentVersion\debug' }, 'ADSPath' : { 'Description' : 'Alternate-data-stream location to store the script code.', @@ -231,4 +231,4 @@ class Module: script += "'Schtasks persistence established "+statusMsg+"'" - return script \ No newline at end of file + return script