From e73a49d6ed977050550cd1bf8eb0634978f509cd Mon Sep 17 00:00:00 2001 From: xx0hcd Date: Tue, 22 May 2018 15:42:18 -0500 Subject: [PATCH] Update slack.profile Had a couple of issues with some commands while testing, changed spawnto_xx from spoolsv.exe to gpupdate.exe and everything is good. --- normal/slack.profile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/normal/slack.profile b/normal/slack.profile index b9313ac..3073e4a 100644 --- a/normal/slack.profile +++ b/normal/slack.profile @@ -197,8 +197,8 @@ http-stager { #https://blog.cobaltstrike.com/2018/04/09/cobalt-strike-3-11-the-snake-that-eats-its-tail/ #https://blog.cobaltstrike.com/2018/04/23/fighting-the-toolset/ -set spawnto_x86 "%windir%\\syswow64\\spoolsv.exe"; -set spawnto_x64 "%windir%\\sysnative\\spoolsv.exe"; +set spawnto_x86 "%windir%\\syswow64\\gpupdate.exe"; +set spawnto_x64 "%windir%\\sysnative\\gpupdate.exe"; #used peclone on wwanmm.dll. #don't use 'set image_size_xx' if using 'set module_xx'