Create wmi-evasion-uptime.json

2017-10-17 18:09:39 -04:00 · 2017-10-17 18:09:39 -04:00 · c6ed81581f
parent 20d5545539
commit c6ed81581f
1 changed files with 14 additions and 0 deletions
--- a/configs/wmi-evasion-uptime.json
+++ b/configs/wmi-evasion-uptime.json
@ -0,0 +1,14 @@
+{
+	"description": "Command exec payload using WMI Win32_Process class\nEvasion technique set to uptime check",
+	"template": "templates/payloads/wmi-evasion-uptime-template.vba",
+	"varcount": 150,
+	"encodingoffset": 4,
+	"chunksize": 200,
+	"encodedvars": 	{
+				"UPTIME":"10000"
+			},
+	"vars": 	[],
+	"evasion": 	["encoder", "uptime"],
+	"payload": "cmd.exe /c whoami"
+}
+