automatic module_metadata_base.json update

Author: jenkins-metasploit

db/modules_metadata_base.json

@@ -200276,6 +200276,57 @@
     "session_types": false,
     "needs_cleanup": null
   },
+  "exploit_windows/persistence/assistive_technology": {
+    "name": "Assistive Technologies Persistence",
+    "fullname": "exploit/windows/persistence/assistive_technology",
+    "aliases": [],
+    "rank": 600,
+    "disclosure_date": "2016-07-22",
+    "type": "exploit",
+    "author": [
+      "h00die"
+    ],
+    "description": "This module achieves persistence by registering a custom Assistive Technology (AT) in the Windows registry.\n          Then it configures the system to launch the AT executable during user logon or desktop switch (such as with\n          an admin prived program).\n          Requires Windows 8 or higher and administrative privileges.",
+    "references": [
+      "ATT&CK-T1546.008",
+      "URL-https://www.hexacorn.com/blog/2016/07/22/beyond-good-ol-run-key-part-42/",
+      "URL-https://msdn.microsoft.com/ru-ru/library/windows/desktop/bb879984.aspx"
+    ],
+    "platform": "Windows",
+    "arch": "x64, x86, aarch64",
+    "rport": null,
+    "autofilter_ports": [],
+    "autofilter_services": [],
+    "targets": [
+      "Automatic"
+    ],
+    "mod_time": "2025-12-19 14:52:34 +0000",
+    "path": "/modules/exploits/windows/persistence/assistive_technology.rb",
+    "is_install_path": true,
+    "ref_name": "windows/persistence/assistive_technology",
+    "check": true,
+    "post_auth": false,
+    "default_credential": false,
+    "notes": {
+      "Stability": [
+        "crash-safe"
+      ],
+      "Reliability": [
+        "repeatable-session",
+        "event-dependent"
+      ],
+      "SideEffects": [
+        "artifacts-on-disk",
+        "config-changes"
+      ]
+    },
+    "session_types": [
+      "meterpreter",
+      "shell"
+    ],
+    "needs_cleanup": null,
+    "actions": []
+  },
   "exploit_windows/persistence/image_exec_options": {
     "name": "Windows Silent Process Exit Persistence",
     "fullname": "exploit/windows/persistence/image_exec_options",