Update lsopen.go

coolcoolnoworries · Oct 16, 2024 · 7064a19 · 7064a19
1 parent 2863f6c
commit 7064a19
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/Payload_Type/poseidon/poseidon/agentfunctions/lsopen.go b/Payload_Type/poseidon/poseidon/agentfunctions/lsopen.go
@@ -7,7 +7,7 @@ import (
 func init() {
 	agentstructs.AllPayloadData.Get("poseidon").AddCommand(agentstructs.Command{
 		Name:                "lsopen",
-		HelpString:          "lsopen {\"application\":[path],\"hideApp\":[boolean],\"appArgs\":[[arg1],[arg2],[arg3]...]}",
+		HelpString:          "lsopen -application \"/sbin/ping\" -hideApp false -appArgs 8.8.8.8 -t 47",
 		Description:         "Use LaunchServices API to run applications and binaries out of PID 1 (launchd). Works as a ppid spoof to evade process tree detections.",
 		Version:             1,
 		MitreAttackMappings: []string{"T1036.009"},