{ "register_obj": { "boftest64": { "arch": "x64", "file_path": "server_confs/bofs/obj/decltest64.o", "description": "Sample BOF file to show x64 capabilities", "artifact": "WINAPI", "mainArgs": "NA", "optionalArg": "NA", "example": "decltest64", "minimumArgCount": 1 }, "boftest86": { "arch": "x86", "file_path": "server_confs/bofs/obj/decltest86.o", "description": "Sample BOF file to show x86 capabilities", "artifact": "WINAPI", "mainArgs": "NA", "optionalArg": "NA", "example": "decltest86", "minimumArgCount": 1 } }, "register_pe": { "seatbelt": { "file_path": "server_confs/sample_profile_pe/Seatbelt.exe", "description": "Runs Seatbelt C# executable", "artifact": "WINAPI", "mainArgs": "NA", "optionalArg": "NA", "example": "seatbelt", "minimumArgCount": 1 } }, "register_pe_inline": { "monologue": { "file_path": "server_confs/sample_profile_pe/InternalMonologue.exe", "description": "Runs InternalMonologue C# executable", "artifact": "WINAPI", "mainArgs": "NA", "optionalArg": "NA", "example": "monologue", "minimumArgCount": 1 } }, "register_exe": { "handles": { "arch" : "x64", "file_path": "server_confs/sample_profile_pe/handle64.exe", "description": "Lists all handles from all processes. Uses sysinternal's handle64.exe executable to run in memory", "artifact": "WINAPI", "mainArgs": "NA", "optionalArg": "NA", "example": "handles", "minimumArgCount": 1 } }, "register_dll": { "boxreflect": { "arch": "x64", "file_path": "server_confs/sample_profile_pe/boxreflect.dll", "description": "Loads a test reflective dll message box", "artifact": "WINAPI", "mainArgs": "NA", "optionalArg": "NA", "example": "boxcheck", "minimumArgCount": 1, "replace_str": { "boxit": "\\x00\\x00\\x00\\x00\\x00", "!This program cannot ": "\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00", "be run in DOS mode.": "\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00" } } }, "register_psexec": { "x64": "/home/paranoidninja/Documents/BadgerSvc64.exe", "x86": "/home/paranoidninja/Documents/BadgerSvc86.exe" } }