MITRE ATT&CKsoftware (tool)
S0192 Pupy
- Domain
- enterprise
- Platforms
- Linux, Windows, macOS, Android
- Version
- 1.3
- Created
- 2018-04-18
Description
Pupy is an open source, cross-platform (Windows, Linux, OSX, Android) remote administration and post-exploitation tool. It is written in Python and can be generated as a payload in several different ways (Windows exe, Python file, PowerShell oneliner/file, Linux elf, APK, Rubber Ducky, etc.). Pupy is publicly available on GitHub.
Related
Uses · MITRE ATT&CK (41)
- T1685.005 Clear Windows Event Logs sub-technique
- T1573.002 Asymmetric Cryptography sub-technique
- T1071.001 Web Protocols sub-technique
- T1569.002 Service Execution sub-technique
- T1059.001 PowerShell sub-technique
- T1059.006 Python sub-technique
- T1497.001 System Checks sub-technique
- T1003.004 LSA Secrets sub-technique
- T1003.005 Cached Domain Credentials sub-technique
- T1087.001 Local Account sub-technique
- T1560.001 Archive via Utility sub-technique
- T1114.001 Local Email Collection sub-technique
- T1134.001 Token Impersonation/Theft sub-technique
- T1555.003 Credentials from Web Browsers sub-technique
- T1003.001 LSASS Memory sub-technique
- T1021.001 Remote Desktop Protocol sub-technique
- T1056.001 Keylogging sub-technique
- T1555 Credentials from Password Stores technique
- T1557.001 Name Resolution Poisoning and SMB Relay sub-technique
- T1552.001 Credentials In Files sub-technique
- T1548.002 Bypass User Account Control sub-technique
- T1550.003 Pass the Ticket sub-technique
- T1136.001 Local Account sub-technique
- T1136.002 Domain Account sub-technique
- T1547.001 Registry Run Keys / Startup Folder sub-technique
- T1543.002 Systemd Service sub-technique
- T1055.001 Dynamic-link Library Injection sub-technique
- T1547.013 XDG Autostart Entries sub-technique
- T1135 Network Share Discovery technique
- T1016 System Network Configuration Discovery technique
References
- https://github.com/n1nj4sec/pupy GitHub Pupy