1 little known secret of forfiles.exe, part 2
ATT&CK techniques detected
T1202Indirect Command Execution
39%
“1 little known secret of forfiles. exe, part 2 in this old post i have demonstrated how to abuse forfiles. exe to run your ‘ cmd. exe ’ of choice. there is one more trick we can do with this tool. when forfiles. exe enumerates the files it executes a default command cmd / c echo …”
Which technique(s) should be tagged here? Pick zero or more — leaving blank just records that the original was wrong.
No matches for .
Loading techniques…
Summary
In this old post I have demonstrated how to abuse forfiles.exe to run your ‘cmd.exe’ of choice. There is one more trick we can do with this tool. When forfiles.exe enumerates the files it executes a default command cmd /c … Continue reading