Notes.exe and Nlnotes.exe

master
Oddvar Moe 2018-05-13 23:37:53 +02:00
parent 34f969a286
commit b1d71a07a2
3 changed files with 64 additions and 0 deletions

View File

@ -90,6 +90,8 @@ If you are missing from the acknowledgement, please let me know (I did not forge
# OTHER NON MICROSOFT BINARIES
[Nlnotes.exe](OtherBinaries/Nlnotes.md)
[Notes.exe](OtherBinaries/Notes.md)
[Nvuhda6.exe](OtherBinaries/Nvuhda6.md)
[Nvudisp.exe](OtherBinaries/Nvudisp.md)
[VBoxDrvInst.exe](OtherBinaries/VBoxDrvInst.md)

31
OtherBinaries/Nlnotes.md Normal file
View File

@ -0,0 +1,31 @@
## Nlnotes.exe
* Functions: Execute
```
NLNOTES.EXE /authenticate "=N:\Lotus\Notes\Data\notes.ini" -Command if((Get-ExecutionPolicy ) -ne AllSigned) { Set-ExecutionPolicy -Scope Process Bypass }
```
Acknowledgements:
* Daniel Bohannon - @danielhbohannon
Code sample:
*
Resources:
* https://gist.github.com/danielbohannon/50ec800e92a888b7d45486e5733c359f
* https://twitter.com/HanseSecure/status/995578436059127808
Full path:
```
?
```
Notes:
Used by Lotus Notes
Detection:

31
OtherBinaries/Notes.md Normal file
View File

@ -0,0 +1,31 @@
## Notes.exe
* Functions: Execute
```
Notes.exe" "=N:\Lotus\Notes\Data\notes.ini" -Command if((Get-ExecutionPolicy ) -ne AllSigned) { Set-ExecutionPolicy -Scope Process Bypass }
```
Acknowledgements:
* Daniel Bohannon - @danielhbohannon
Code sample:
*
Resources:
* https://gist.github.com/danielbohannon/50ec800e92a888b7d45486e5733c359f
* https://twitter.com/HanseSecure/status/995578436059127808
Full path:
```
C:\Program Files (x86)\IBM\Lotus\Notes\notes.exe
```
Notes:
Used by Lotus Notes
Detection: