79 lines
2.8 KiB
JSON
79 lines
2.8 KiB
JSON
{
|
|
"register_obj": {
|
|
"boftest64": {
|
|
"arch": "x64",
|
|
"file_path": "server_confs/bofs/obj/decltest64.o",
|
|
"description": "Sample BOF file to show x64 capabilities",
|
|
"artifact": "WINAPI",
|
|
"mainArgs": "NA",
|
|
"optionalArg": "NA",
|
|
"example": "decltest64",
|
|
"minimumArgCount": 1
|
|
},
|
|
"boftest86": {
|
|
"arch": "x86",
|
|
"file_path": "server_confs/bofs/obj/decltest86.o",
|
|
"description": "Sample BOF file to show x86 capabilities",
|
|
"artifact": "WINAPI",
|
|
"mainArgs": "NA",
|
|
"optionalArg": "NA",
|
|
"example": "decltest86",
|
|
"minimumArgCount": 1
|
|
}
|
|
},
|
|
"register_pe": {
|
|
"seatbelt": {
|
|
"file_path": "server_confs/sample_profile_pe/Seatbelt.exe",
|
|
"description": "Runs Seatbelt C# executable",
|
|
"artifact": "WINAPI",
|
|
"mainArgs": "NA",
|
|
"optionalArg": "NA",
|
|
"example": "seatbelt",
|
|
"minimumArgCount": 1
|
|
}
|
|
},
|
|
"register_pe_inline": {
|
|
"monologue": {
|
|
"file_path": "server_confs/sample_profile_pe/InternalMonologue.exe",
|
|
"description": "Runs InternalMonologue C# executable",
|
|
"artifact": "WINAPI",
|
|
"mainArgs": "NA",
|
|
"optionalArg": "NA",
|
|
"example": "monologue",
|
|
"minimumArgCount": 1
|
|
}
|
|
},
|
|
"register_exe": {
|
|
"handles": {
|
|
"arch" : "x64",
|
|
"file_path": "server_confs/sample_profile_pe/handle64.exe",
|
|
"description": "Lists all handles from all processes. Uses sysinternal's handle64.exe executable to run in memory",
|
|
"artifact": "WINAPI",
|
|
"mainArgs": "NA",
|
|
"optionalArg": "NA",
|
|
"example": "handles",
|
|
"minimumArgCount": 1
|
|
}
|
|
},
|
|
"register_dll": {
|
|
"boxreflect": {
|
|
"arch": "x64",
|
|
"file_path": "server_confs/sample_profile_pe/boxreflect.dll",
|
|
"description": "Loads a test reflective dll message box",
|
|
"artifact": "WINAPI",
|
|
"mainArgs": "NA",
|
|
"optionalArg": "NA",
|
|
"example": "boxcheck",
|
|
"minimumArgCount": 1,
|
|
"replace_str": {
|
|
"boxit": "\\x00\\x00\\x00\\x00\\x00",
|
|
"!This program cannot ": "\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00",
|
|
"be run in DOS mode.": "\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00"
|
|
}
|
|
}
|
|
},
|
|
"register_psexec": {
|
|
"x64": "/home/paranoidninja/Documents/BadgerSvc64.exe",
|
|
"x86": "/home/paranoidninja/Documents/BadgerSvc86.exe"
|
|
}
|
|
} |