T1059.012 Command and Scripting Interpreter: Hypervisor CLI

Adversaries may abuse hypervisor command line interpreters (CLIs) to execute malicious commands. MITRE ATT&CK

Part of

MITRE ATT&CK

T1059Command and Scripting Interpreter

process creation, the highest levels first

highESXi Admin Permission Assigned To Account Via ESXCLINasreddine Bencherchali (Nextron Systems) · Linux

mediumESXi Storage Information Discovery Via ESXCLINasreddine Bencherchali (Nextron Systems), Cedric Maurugeon · Linux

mediumESXi VM Kill Via ESXCLINasreddine Bencherchali (Nextron Systems), Cedric Maurugeon · Linux

mediumESXi VSAN Information Discovery Via ESXCLINasreddine Bencherchali (Nextron Systems), Cedric Maurugeon · Linux