Skip to content
This repository has been archived by the owner on Aug 18, 2023. It is now read-only.

Commit

Permalink
Patch 1.5
Browse files Browse the repository at this point in the history
  • Loading branch information
Tylous authored Apr 7, 2021
1 parent 94c19fb commit be21250
Showing 1 changed file with 3 additions and 3 deletions.
6 changes: 3 additions & 3 deletions ScareCrow.go
Original file line number Diff line number Diff line change
Expand Up @@ -44,9 +44,9 @@ func options() *FlagOptions {
refresher := flag.Bool("unmodified", false, "When enabled will generate a DLL loader that WILL NOT removing the EDR hooks in system DLLs and only use custom syscalls (set to false by default)")
URL := flag.String("url", "", "URL associated with the Delivery option to retrieve the payload. (e.g. https://acme.com/)")
CommandLoader := flag.String("delivery", "", `Generates a one-liner command to download and execute the payload remotely:
[*] bits - Generates a Bitsadmin one liner command to download, execute and remove the loader (Compatable with Binary, Control, Excel and Wscript Loaders).
[*] hta - Generates a blank hta file containing the loader along with a MSHTA command execute the loader remotely in the background (Compatable with Control and Excel Loaders).
[*] macro - Generates an office macro that will download and execute the loader remotely (Compatable with Control, Excel and Wscript Loaders)`)
[*] bits - Generates a Bitsadmin one liner command to download, execute and remove the loader (Compatible with Binary, Control, Excel and Wscript Loaders).
[*] hta - Generates a blank hta file containing the loader along with a MSHTA command execute the loader remotely in the background (Compatible with Control and Excel Loaders).
[*] macro - Generates an office macro that will download and execute the loader remotely (Compatible with Control, Excel and Wscript Loaders)`)
domain := flag.String("domain", "", "The domain name to use for creating a fake code signing cert. (e.g. www.acme.com) ")
password := flag.String("password", "", "The password for code signing cert. Required when -valid is used.")
valid := flag.String("valid", "", "The path to a valid code signing cert. Used instead -domain if a valid code signing cert is desired.")
Expand Down

0 comments on commit be21250

Please sign in to comment.