pkhazov/Sigma-C2
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Run command was divided into runexe and rundll

Browse Source
This commit is contained in:
Pavlo Khazov
2025-04-27 11:48:12 +02:00
parent 723aa168f6
commit 70896bb6c2
9 changed files with 196 additions and 110 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
operator/operator.go
View File

@@ -77,7 +77,8 @@ var availableContextCommands = []struct {
{"sleep", map[string][]string{"": {""}}},
{"cmd", map[string][]string{"": {""}}},
{"powershell", map[string][]string{"": {""}}},
{"run", map[string][]string{"": {""}}},
{"runexe", map[string][]string{"": {""}}},
{"rundll", map[string][]string{"": {""}}},
{"sysinfo", map[string][]string{"": {""}}},
{"files", map[string][]string{"": {""}}},
{"artifacts", map[string][]string{"": {""}}},
@@ -105,8 +106,9 @@ var availableContextCommands = []struct {
{"cleanup", map[string][]string{"": {""}}},
}
// Commands which agentID is appended to
var contextCommands = []string{
"sleep", "cmd", "powershell", "run", "sysinfo", "files", "keylogger",
"sleep", "cmd", "powershell", "runexe", "rundll", "sysinfo", "files", "keylogger",
"persistence", "download", "upload", "artifacts", "kill", "cleanup",
"exit", "cd", "ls", "pwd", "dir", "proxy", "ps", "inject", "spawn",
}