Skip to content
This repository has been archived by the owner on Dec 11, 2018. It is now read-only.

Latest commit

 

History

History
35 lines (23 loc) · 725 Bytes

Runonce.md

File metadata and controls

35 lines (23 loc) · 725 Bytes

UPDATE BOOKMARKS - PROJECT MOVED TO A DEDICATED PROJECT SITE. THIS SITE WILL NOT BE UPDATED ANYMORE, BUT WILL BE KEPT FOR HISTORICAL REASONS.

New site: https://github.com/LOLBAS-Project/LOLBAS Web portal: https://lolbas-project.github.io/

Runonce.exe

  • Functions: Execute
Runonce.exe /AlternateShellStartup

Acknowledgements:

  • Pierre-Alexandre Braeken - @pabraeken

Resources:

Full path:

c:\windows\system32\runonce.exe
c:\windows\sysWOW64\runonce.exe

Notes:

  • Prerequisites
  1. Create HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components[YOURKEY]
  2. Create two Strings : a) @ : Hi from Active Setup b) StubPath : calc.exe