Notes.exe and Nlnotes.exe
parent
34f969a286
commit
b1d71a07a2
|
@ -90,6 +90,8 @@ If you are missing from the acknowledgement, please let me know (I did not forge
|
||||||
|
|
||||||
|
|
||||||
# OTHER NON MICROSOFT BINARIES
|
# OTHER NON MICROSOFT BINARIES
|
||||||
|
[Nlnotes.exe](OtherBinaries/Nlnotes.md)
|
||||||
|
[Notes.exe](OtherBinaries/Notes.md)
|
||||||
[Nvuhda6.exe](OtherBinaries/Nvuhda6.md)
|
[Nvuhda6.exe](OtherBinaries/Nvuhda6.md)
|
||||||
[Nvudisp.exe](OtherBinaries/Nvudisp.md)
|
[Nvudisp.exe](OtherBinaries/Nvudisp.md)
|
||||||
[VBoxDrvInst.exe](OtherBinaries/VBoxDrvInst.md)
|
[VBoxDrvInst.exe](OtherBinaries/VBoxDrvInst.md)
|
||||||
|
|
|
@ -0,0 +1,31 @@
|
||||||
|
## Nlnotes.exe
|
||||||
|
|
||||||
|
* Functions: Execute
|
||||||
|
|
||||||
|
```
|
||||||
|
NLNOTES.EXE /authenticate "=N:\Lotus\Notes\Data\notes.ini" -Command if((Get-ExecutionPolicy ) -ne AllSigned) { Set-ExecutionPolicy -Scope Process Bypass }
|
||||||
|
```
|
||||||
|
|
||||||
|
Acknowledgements:
|
||||||
|
* Daniel Bohannon - @danielhbohannon
|
||||||
|
|
||||||
|
Code sample:
|
||||||
|
*
|
||||||
|
|
||||||
|
Resources:
|
||||||
|
* https://gist.github.com/danielbohannon/50ec800e92a888b7d45486e5733c359f
|
||||||
|
* https://twitter.com/HanseSecure/status/995578436059127808
|
||||||
|
|
||||||
|
|
||||||
|
Full path:
|
||||||
|
```
|
||||||
|
?
|
||||||
|
```
|
||||||
|
|
||||||
|
Notes:
|
||||||
|
Used by Lotus Notes
|
||||||
|
|
||||||
|
|
||||||
|
Detection:
|
||||||
|
|
||||||
|
|
|
@ -0,0 +1,31 @@
|
||||||
|
## Notes.exe
|
||||||
|
|
||||||
|
* Functions: Execute
|
||||||
|
|
||||||
|
```
|
||||||
|
Notes.exe" "=N:\Lotus\Notes\Data\notes.ini" -Command if((Get-ExecutionPolicy ) -ne AllSigned) { Set-ExecutionPolicy -Scope Process Bypass }
|
||||||
|
```
|
||||||
|
|
||||||
|
Acknowledgements:
|
||||||
|
* Daniel Bohannon - @danielhbohannon
|
||||||
|
|
||||||
|
Code sample:
|
||||||
|
*
|
||||||
|
|
||||||
|
Resources:
|
||||||
|
* https://gist.github.com/danielbohannon/50ec800e92a888b7d45486e5733c359f
|
||||||
|
* https://twitter.com/HanseSecure/status/995578436059127808
|
||||||
|
|
||||||
|
|
||||||
|
Full path:
|
||||||
|
```
|
||||||
|
C:\Program Files (x86)\IBM\Lotus\Notes\notes.exe
|
||||||
|
```
|
||||||
|
|
||||||
|
Notes:
|
||||||
|
Used by Lotus Notes
|
||||||
|
|
||||||
|
|
||||||
|
Detection:
|
||||||
|
|
||||||
|
|
Loading…
Reference in New Issue