MITRE ATT&CKsoftware (tool)

S0250 Koadic

Published 2018-10-17 Modified 2024-11-17 Official page ↗
Domain
enterprise
Platforms
Windows
Version
2.0
Created
2018-10-17

Description

Koadic is a Windows post-exploitation framework and penetration testing tool that is publicly available on GitHub. Koadic has several options for staging payloads and creating implants, and performs most of its operations using Windows Script Host.

Related

Uses · MITRE ATT&CK (27)

  • T1573.002 Asymmetric Cryptography sub-technique
  • T1071.001 Web Protocols sub-technique
  • T1564.003 Hidden Window sub-technique
  • T1569.002 Service Execution sub-technique
  • T1059.001 PowerShell sub-technique
  • T1059.003 Windows Command Shell sub-technique
  • T1059.005 Visual Basic sub-technique
  • T1003.002 Security Account Manager sub-technique
  • T1003.003 NTDS sub-technique
  • T1021.001 Remote Desktop Protocol sub-technique
  • T1548.002 Bypass User Account Control sub-technique
  • T1218.005 Mshta sub-technique
  • T1218.010 Regsvr32 sub-technique
  • T1218.011 Rundll32 sub-technique
  • T1547.001 Registry Run Keys / Startup Folder sub-technique
  • T1055.001 Dynamic-link Library Injection sub-technique
  • T1053.005 Scheduled Task sub-technique
  • T1135 Network Share Discovery technique
  • T1005 Data from Local System technique
  • T1016 System Network Configuration Discovery technique
  • T1033 System Owner/User Discovery technique
  • T1046 Network Service Discovery technique
  • T1047 Windows Management Instrumentation technique
  • T1082 System Information Discovery technique
  • T1083 File and Directory Discovery technique
  • T1105 Ingress Tool Transfer technique
  • T1115 Clipboard Data technique

Referenced by MITRE ATT&CK · uses (4)

References