[red team] att & CK - using bits services to achieve persistence

Technical background

BITS ( Background intelligent delivery service )  It's a  Windows  Components , It can transfer files asynchronously in the foreground or background , Adjust the transmission speed to ensure that other network applications get a response , And automatically resume file transfer after restarting the computer or re establishing a network connection .

bitsadmin Is a command line tool , Used to create download or upload tasks and monitor their progress . You can execute bitsadmin /? or bitsadmin /HELP Get help list .

common bitsadmin command

bitsadmin /create [type] DisplayName // Create a task 
bitsadmin /cancel <Job> // Delete a task 
bitsadmin /list /allusers /verbose // List all tasks 
bitsadmin /AddFile <Job> <RemoteURL> <LocalName> // To task test Add a download file 
bitsadmin /SetNotifyCmdLine <Job> <ProgramName> [ProgramParameters] // Set the command line command that will run when the task completes transmission or when the task enters the state .
bitsadmin /Resume <Job> //** New or suspended tasks in the transmission queue .
bitsadmin /cancel <Job> //