External/APTs-Adversary-Simulation
1
0
Fork 0
mirror of https://github.com/S3N4T0R-0X0/APTs-Adversary-Simulation.git synced 2026-08-04 09:41:40 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update README.md

Browse Source
This commit is contained in:
S3N4T0R
2026-06-29 09:02:52 -04:00
committed by GitHub
parent e7fd85f527
commit ca2074adab
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
North Koreans APT/Velvet Chollima/README.md
+3
View File
@@ -64,6 +64,9 @@ Establishes a reverse shell connection to IP:PORT.
Allows the attacker to remotely execute commands on the victim’s machine. Allows the attacker to remotely execute commands on the victim’s machine.
Persists by adding itself to the Windows registry (Run Key), ensuring execution every time the system starts. Persists by adding itself to the Windows registry (Run Key), ensuring execution every time the system starts.
<img width="1335" height="445" alt="Screenshot From 2026-06-29 09-01-20" src="https://github.com/user-attachments/assets/deabd1f2-03af-4945-acf9-6cdd3829b356" />
## The third stage (Reverse shell by PowerShell) ## The third stage (Reverse shell by PowerShell)
The final result of this fake CAPTCHA attack is that the attacker gains remote access to the victim's machine through a reverse shell connection. Once the victim unknowingly runs the copied PowerShell command, their system establishes a connection to the attacker's server, allowing remote command execution. The final result of this fake CAPTCHA attack is that the attacker gains remote access to the victim's machine through a reverse shell connection. Once the victim unknowingly runs the copied PowerShell command, their system establishes a connection to the attacker's server, allowing remote command execution.