CatalogLOLBAS

LOL · Script

Pester.bat

2 techniquesWindowsLOLBASGPL-3.0

Execute

ExecutionWindows

Execute code using Pester. The third parameter can be anything. The fourth is the payload.

Use Proxy execution

Pester.bat [/help|?|-?|/?] "$null; {CMD}"
Evidence
Upstream reference
Environment
Local host
Context
user
Native
Execute
MITRE
T1216

Execute

ExecutionWindows

Execute code using Pester. Example here executes specified executable.

Use Proxy execution

Pester.bat ;{PATH:.exe}
Evidence
Upstream reference
Environment
Local host
Context
user
Native
Execute
MITRE
T1216