II. Runners

Runners are outer wrappers that encapsulate the entirety of the payload. These are typically LOLBAS / LOLBIN specific formats such MSBuild or HTA files. In essence, runners are the "type" of payload that you are building.

Selecting Runners

You can only select one Runner per payload, and the Runner you select must be compatible with the Interface you are using.

To list all Runners that are compatible with your interface, use the --list, --compatible, and --interface flags as described in link to generalized guide here.

Once you've chosen a Runner, you can use the --runner flag to instruct DropEngine to use it, as shown in the following example.

Command:

python dropengine.py --build [..snip..] --runner msbuild_runner [..snip..]