diff --git a/atomics/T1118/T1118.yaml b/atomics/T1118/T1118.yaml index 7f9c9f8995..fdcafb0510 100644 --- a/atomics/T1118/T1118.yaml +++ b/atomics/T1118/T1118.yaml @@ -12,9 +12,24 @@ atomic_tests: filename: description: location of the payload type: Path - default: T1118.dll + default: C:\AtomicRedTeam\atomics\T1118\src\T1118.dll executor: name: command_prompt command: | - C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe /target:library T1118.cs + C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe /target:library /out:C:\AtomicRedTeam\atomics\T1118\src\T1118.dll C:\AtomicRedTeam\atomics\T1118\src\T1118.cs C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe /logfile= /LogToConsole=false /U #{filename} +- name: InstallUtil GetHelp method call + description: | + Executes the Uninstall Method + supported_platforms: + - windows + input_arguments: + filename: + description: location of the payload + type: Path + default: C:\AtomicRedTeam\atomics\T1118\src\T1118.dll + executor: + name: command_prompt + command: | + C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe /target:library /out:C:\AtomicRedTeam\atomics\T1118\src\T1118.dll C:\AtomicRedTeam\atomics\T1118\src\T1118.cs + C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe /? #{filename} diff --git a/atomics/T1118/src/T1118.cs b/atomics/T1118/src/T1118.cs index dd7ecf3ae0..6b16842d16 100644 --- a/atomics/T1118/src/T1118.cs +++ b/atomics/T1118/src/T1118.cs @@ -12,6 +12,11 @@ C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe /target:library T1118.cs Step Two: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe /U /logfile= /logtoconsole=false T1118.dll + +HelpText Invocation: +C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe /? T1118.dll + + */ public class Program @@ -35,4 +40,16 @@ public override void Uninstall(System.Collections.IDictionary savedState) Console.WriteLine("Hello There From Uninstall, If you are reading this, prevention has failed.\n"); } + + // Override the property 'HelpText'. + // + public override string HelpText + { + get + { + + return "Hello There From HelpText, If you are reading this, prevention has failed.\n"; + } + } + }