Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@
name: x
repeatable: False
platforms:
linux:
freebsd,linux:
Copy link

Copilot AI Oct 6, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Combining OS names in a single YAML key results in an invalid platform identifier. Please split into two keys (freebsd: and linux:) so this step executes on both platforms as intended.

Copilot uses AI. Check for mistakes.
sh:
command: |
touch ~/.bashrc;
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -7,11 +7,11 @@
attack_id: x
name: x
platforms:
linux:
freebsd,linux:
sh:
command: |
nc -nlv 7011 &
Comment on lines +10 to 13
Copy link

Copilot AI Oct 6, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The platform key 'freebsd,linux' will not be recognized as either 'freebsd' or 'linux' by platform selectors. Define separate platform blocks per OS to maintain compatibility.

Suggested change
freebsd,linux:
sh:
command: |
nc -nlv 7011 &
freebsd:
sh:
command: |
nc -nlv 7011 &
linux:
sh:
command: |
nc -nlv 7011 &

Copilot uses AI. Check for mistakes.
darwin:
sh:
command: |
nc -nlv 7011 &
nc -nlv 7011 &
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@
attack_id: x
name: x
platforms:
linux:
freebsd,linux:
sh:
command: |
rm -f /var/mail/victim
rm -f /var/mail/victim
Original file line number Diff line number Diff line change
Expand Up @@ -7,9 +7,9 @@
attack_id: x
name: x
platforms:
linux:
freebsd,linux:
Copy link

Copilot AI Oct 6, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Using 'freebsd,linux' as a combined key creates an unknown platform name and will not match either FreeBSD or Linux. Split into two distinct platform keys so the loader/selector can correctly target both OSes.

Copilot uses AI. Check for mistakes.
sh:
command: |
mv ./phish_email.txt /var/mail/victim
payloads:
- phish_email.txt
- phish_email.txt
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@
attack_id: x
name: x
platforms:
linux:
freebsd,linux:
Copy link

Copilot AI Oct 6, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This defines a single platform key literally named 'freebsd,linux' rather than two platforms. YAML will not split this key, so platform matching for either 'freebsd' or 'linux' will fail. Define separate platform entries (freebsd: and linux:) to ensure both are recognized.

Copilot uses AI. Check for mistakes.
sh:
command: |
crontab -l > new_crontab;
Expand All @@ -26,4 +26,4 @@
command: |
$action = New-ScheduledTaskAction -Execute "calc.exe";
$trigger = New-ScheduledTaskTrigger -Daily -At 9am;
Register-ScheduledTask -Action $action -Trigger $trigger -TaskName "FindMe" -Description "Pretend malicious scheduled action";
Register-ScheduledTask -Action $action -Trigger $trigger -TaskName "FindMe" -Description "Pretend malicious scheduled action";