From 3d6b5c764ee144fd906aaad7dbff7b6ac060a3d8 Mon Sep 17 00:00:00 2001 From: pe3zx Date: Wed, 10 Feb 2021 16:30:59 +0700 Subject: [PATCH] Add: gigajew/WinXRunPE to Execution section --- Offensive.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/Offensive.md b/Offensive.md index b11f5b2..46b7928 100644 --- a/Offensive.md +++ b/Offensive.md @@ -177,6 +177,10 @@ Some tools can be categorized in more than one category. But because the current GhostPack/SharpWMI SharpWMI is a C# implementation of various WMI functionality. + + gigajew/WinXRunPE + Two C# RunPE's capable of x86 and x64 injections + hausec/MaliciousClickOnceMSBuild Basic C# Project that will take an MSBuild payload and run it with MSBuild via ClickOnce.