ZacharyZcR
1ebcd6dc79
fix: 补全 Windows 持久化插件的执行逻辑
5 个 Windows 持久化插件原先只拼接命令字符串不执行,现全部补上真实执行逻辑:
- winschtask: schtasks /create 创建计划任务
- winservice: sc create 创建系统服务
- winstartup: 复制 PE 到启动文件夹
- winregistry: reg add 写入 Run/RunOnce 注册表键
- winwmi: PowerShell 创建 WMI 事件订阅(单次调用,1.2s 完成)
2026-05-15 23:35:43 +08:00
..
2026-05-15 22:52:11 +08:00
2026-05-13 14:41:23 +08:00
2026-05-13 14:41:23 +08:00
2026-05-13 14:41:23 +08:00
2026-05-13 14:41:23 +08:00
2026-05-13 14:41:23 +08:00
2026-05-13 14:41:23 +08:00
2026-05-15 18:41:36 +08:00
2026-05-13 14:41:23 +08:00
2026-05-13 14:41:23 +08:00
2026-05-13 14:41:23 +08:00
2026-05-13 14:41:23 +08:00
2026-05-15 23:16:35 +08:00
2026-05-15 23:16:35 +08:00
2026-05-15 23:16:35 +08:00
2026-05-13 14:41:23 +08:00
2026-05-15 23:35:43 +08:00
2026-05-15 23:35:43 +08:00
2026-05-15 23:35:43 +08:00
2026-05-15 23:35:43 +08:00
2026-05-15 23:35:43 +08:00