mirror of
https://github.com/Aryma-f4/Ares-mythic.git
synced 2026-06-12 14:34:11 +00:00
first commit
This commit is contained in:
36
documentation-payload/apollo/commands/psinject.md
Normal file
36
documentation-payload/apollo/commands/psinject.md
Normal file
@@ -0,0 +1,36 @@
|
||||
+++
|
||||
title = "psinject"
|
||||
chapter = false
|
||||
weight = 103
|
||||
hidden = false
|
||||
+++
|
||||
|
||||
{{% notice info %}}
|
||||
Artifacts Generated: Process Inject
|
||||
{{% /notice %}}
|
||||
|
||||
## Summary
|
||||
Execute PowerShell commands in a remote process. Leverages the currently set injection technique to inject the PowerShell loader.
|
||||
|
||||
### Arguments (Positional or Popup)
|
||||
#### PID
|
||||
Target process ID.
|
||||
|
||||
#### Command
|
||||
PowerShell command to be executed.
|
||||
|
||||
## Usage
|
||||
```
|
||||
psinject -PID [pid] -Command [command]
|
||||
```
|
||||
|
||||
Example
|
||||
```
|
||||
psinject -PID 1234 -Command Get-Process
|
||||
```
|
||||
|
||||
|
||||
## MITRE ATT&CK Mapping
|
||||
|
||||
- T1059
|
||||
- T1055
|
||||
Reference in New Issue
Block a user