LOLBAS. GitHub
LIVING OFF THE LAND / OS SCRIPTS

Pester.bat

View source

Used as part of the Powershell pester

Execute
02COMMAND EXAMPLES
01ATT&CK TECHNIQUES
01DETECTION RESOURCES
01CAPABILITIES
01 / TRADECRAFT

Command reference

2 examples

Execute2

EXAMPLE 01T1216

Execute code using Pester. The third parameter can be anything. The fourth is the payload.

COMMAND
Pester.bat [/help|?|-?|/?] "$null; {CMD}"
USE CASE
Proxy execution
PRIVILEGES
User
OPERATING SYSTEM
Windows 10, Windows 11
Execute · EXE
EXAMPLE 02T1216

Execute code using Pester. Example here executes specified executable.

COMMAND
Pester.bat ;{PATH:.exe}
USE CASE
Proxy execution
PRIVILEGES
User
OPERATING SYSTEM
Windows 10, Windows 11
Execute · EXE
02 / ON DISK

Known paths

c:\Program Files\WindowsPowerShell\Modules\Pester\<VERSION>\bin\Pester.bat
03 / DEFENSIVE INTELLIGENCE

Detection & indicators

1 resources
FURTHER READING

Research & resources

COMMUNITY RESEARCH

Acknowledgements

Emin Atac@p0w3rsh3ll
Stamatis Chatzimangou@_st0pp3r_