AS2Go.json
|
{
"Scripts": [ { "Script": [ { "Name": "Name", "Value": "AS2Go" }, { "Name": "Version", "Value": "2026.11.13.1258" }, { "Name": "Author", "Value": "as2go@mrhozi.com" } ] } ], "DefaultParameter": [ { "Setting": [ { "Name": "UseCase", "Value": "Ransomware Recovery Workshop" }, { "Name": "DemoTitle", "Value": "Attack Scenario to Go - along the kill-chain" }, { "Name": "AS2GoDC", "Value": "" }, { "Name": "AS2GoViPC", "Value": "" }, { "Name": "fqdn", "Value": "" }, { "Name": "DomainSID", "Value": "" }, { "Name": "AS2GoSAW", "Value": "" }, { "Name": "AS2GoAppServer", "Value": "" }, { "Name": "BDUsersOU", "Value": "" }, { "Name": "AS2GoSearchBase", "Value": "" }, { "Name": "BackupShare", "Value": "" }, { "Name": "globalHelpDesk", "Value": "" }, { "Name": "Honeytoken", "Value": "" }, { "Name": "ticketsDir", "Value": "C:\\temp\\tickets" }, { "Name": "ticketsPath", "Value": "c$\\temp\\tickets" }, { "Name": "time2reboot", "Value": "33" }, { "Name": "BadCA", "Value": "Wifi" }, { "Name": "Tools", "Value": "C:\\Users\\Public\\AS2Go\\MaliciousTools" }, { "Name": "LastStart", "Value": "" }, { "Name": "LastFinished", "Value": "" }, { "Name": "LastDuration", "Value": "" }, { "Name": "LastVictim", "Value": "" }, { "Name": "LastBDUser", "Value": "" }, { "Name": "LastAltUser", "Value": "" }, { "Name": "LastUPNSuffix", "Value": "" }, { "Name": "LastStage", "Value": "Domain Compromised & Persistence" }, { "Name": "LastPW", "Value": "" }, { "Name": "LastNumofDemoUsers", "Value": "1000" }, { "Name": "PreviousBase", "Value": "" }, { "Name": "BreakGlassAccount", "Value": "" }, { "Name": "RandomAccountOperators", "Value": "10" }, { "Name": "LastIdentifier", "Value": "" }, { "Name": "LastGTUser", "Value": "" }, { "Name": "LastPriviledgeEscaltion", "Value": "" }, { "Name": "PriviledgeGroupRIDs", "Value": "'512', '517', '518', '519', '520', '525', '526', '527', '548', '549', '550', '551', '2122'" } ] } ] } |