search

cobbr / Elite

Elite is the client-side component of the Covenant project. Covenant is a .NET command and control framework that aims to highlight the attack surface of .NET, make the use of offensive .NET tradecraft easier, and serve as a collaborative command and control platform for red teamers.
https://cobbr.io/Covenant.html
GNU General Public License v3.0
117 stars 18 forks source link

Where are generated files stored? #10

Closed ThunderousDreamer closed 5 years ago

ThunderousDreamer commented 5 years ago

Hi all,

I'm trying to figure out where the generated files are stored. For example I generated a MSBuild launcher, but now I'm not sure where to find these files.


[*] Generated MSBuildLauncher: msbuild.exe file.xml```
cobbr commented 5 years ago

@ThunderousDreamer You'll need to use the write command to write it out to a file

ThunderousDreamer commented 5 years ago

I see. So I write output.xml for the xml file, then move that xml file to the target host and run msbuild.exe output.xml

Then I could hypothetically host the output.xml on a simpeHTTPServer locally and have msbuild.exe run that file like msbuild.exe \\192.168.0.22\output.xml through NTLMRelay or something, right?

Makes sense, thank you!

cobbr commented 5 years ago

I don't believe hosting on an HTTP server and accessing over a UNC path will work like you intend.

But you have the Covenant/Elite process correct: you generate the launcher, write it to a file, and then find a way to execute on the target system.