From 014bc87eaaa59097cf487f3ab9321952b66cf2a6 Mon Sep 17 00:00:00 2001
From: Marmeus <marmeus@redteam.lan>
Date: Tue, 20 Jan 2026 14:04:18 +0000
Subject: [PATCH] Adding attribute supported_os to remaining commands

---
 Payload_Type/cazalla/cazalla/agent_functions/download.py       | 3 +++
 Payload_Type/cazalla/cazalla/agent_functions/exit.py           | 3 +++
 .../cazalla/cazalla/agent_functions/inline_execute_assembly.py | 3 ++-
 Payload_Type/cazalla/cazalla/agent_functions/kill.py           | 3 +++
 Payload_Type/cazalla/cazalla/agent_functions/list_tokens.py    | 3 +++
 Payload_Type/cazalla/cazalla/agent_functions/make_token.py     | 3 +++
 Payload_Type/cazalla/cazalla/agent_functions/rev2self.py       | 3 +++
 Payload_Type/cazalla/cazalla/agent_functions/screenshot.py     | 3 +++
 Payload_Type/cazalla/cazalla/agent_functions/shell.py          | 2 +-
 Payload_Type/cazalla/cazalla/agent_functions/steal_token.py    | 3 +++
 Payload_Type/cazalla/cazalla/agent_functions/upload.py         | 3 +++
 Payload_Type/cazalla/cazalla/agent_functions/whoami.py         | 3 +++
 12 files changed, 33 insertions(+), 2 deletions(-)

diff --git a/Payload_Type/cazalla/cazalla/agent_functions/download.py b/Payload_Type/cazalla/cazalla/agent_functions/download.py
index 57ddfa5..70e8f71 100644
--- a/Payload_Type/cazalla/cazalla/agent_functions/download.py
+++ b/Payload_Type/cazalla/cazalla/agent_functions/download.py
@@ -35,6 +35,9 @@ class DownloadCommand(CommandBase):
     supported_ui_features = ["file_browser:download"]
     author = "@KaseyaOFSTeam"
     argument_class = DownloadArguments
+    attributes = CommandAttributes(
+        supported_os=[SupportedOS.Windows]
+    )
 
     async def opsec_pre(self, taskData: PTTaskMessageAllData) -> PTTTaskOPSECPreTaskMessageResponse:
         """
diff --git a/Payload_Type/cazalla/cazalla/agent_functions/exit.py b/Payload_Type/cazalla/cazalla/agent_functions/exit.py
index 2e1719b..70c1425 100644
--- a/Payload_Type/cazalla/cazalla/agent_functions/exit.py
+++ b/Payload_Type/cazalla/cazalla/agent_functions/exit.py
@@ -25,6 +25,9 @@ class ExitCommand(CommandBase):
     author = "Kaseya OFSTeam"
     argument_class = ExitArguments
     attackmapping = []
+    attributes = CommandAttributes(
+        supported_os=[SupportedOS.Windows]
+    )
 
     async def create_go_tasking(self, taskData: PTTaskMessageAllData) -> PTTaskCreateTaskingMessageResponse:
         response = PTTaskCreateTaskingMessageResponse(
diff --git a/Payload_Type/cazalla/cazalla/agent_functions/inline_execute_assembly.py b/Payload_Type/cazalla/cazalla/agent_functions/inline_execute_assembly.py
index 9a30a64..19a7a39 100644
--- a/Payload_Type/cazalla/cazalla/agent_functions/inline_execute_assembly.py
+++ b/Payload_Type/cazalla/cazalla/agent_functions/inline_execute_assembly.py
@@ -266,7 +266,8 @@ class InlineExecuteAssemblyCommand(CommandBase):
     completion_functions = {"coff_completion_callback": coff_completion_callback}
     attributes = CommandAttributes(
         dependencies=["inline_execute"],
-        alias=True
+        alias=True,
+        supported_os=[SupportedOS.Windows]
     )
 
     async def opsec_pre(self, taskData: PTTaskMessageAllData) -> PTTTaskOPSECPreTaskMessageResponse:
diff --git a/Payload_Type/cazalla/cazalla/agent_functions/kill.py b/Payload_Type/cazalla/cazalla/agent_functions/kill.py
index db75ea4..bc20834 100644
--- a/Payload_Type/cazalla/cazalla/agent_functions/kill.py
+++ b/Payload_Type/cazalla/cazalla/agent_functions/kill.py
@@ -73,6 +73,9 @@ class KillCommand(CommandBase):
     attackmapping = ["T1489"]
     supported_ui_features = ["process_browser:kill"]
     argument_class = KillArguments
+    attributes = CommandAttributes(
+        supported_os=[SupportedOS.Windows]
+    )
 
     async def opsec_pre(self, taskData: PTTaskMessageAllData) -> PTTTaskOPSECPreTaskMessageResponse:
         """
diff --git a/Payload_Type/cazalla/cazalla/agent_functions/list_tokens.py b/Payload_Type/cazalla/cazalla/agent_functions/list_tokens.py
index f1d19d0..1d7be84 100644
--- a/Payload_Type/cazalla/cazalla/agent_functions/list_tokens.py
+++ b/Payload_Type/cazalla/cazalla/agent_functions/list_tokens.py
@@ -52,6 +52,9 @@ class ListTokensCommand(CommandBase):
     author = "@KaseyaOFSTeam"
     supported_ui_features = ["process_browser:list_tokens"]
     argument_class = ListTokensArguments
+    attributes = CommandAttributes(
+        supported_os=[SupportedOS.Windows]
+    )
 
     async def opsec_pre(self, taskData: PTTaskMessageAllData) -> PTTTaskOPSECPreTaskMessageResponse:
         """
diff --git a/Payload_Type/cazalla/cazalla/agent_functions/make_token.py b/Payload_Type/cazalla/cazalla/agent_functions/make_token.py
index 33c1871..a04ac07 100644
--- a/Payload_Type/cazalla/cazalla/agent_functions/make_token.py
+++ b/Payload_Type/cazalla/cazalla/agent_functions/make_token.py
@@ -75,6 +75,9 @@ class MakeTokenCommand(CommandBase):
     author = "@KaseyaOFSTeam"
     attackmapping = ["T1134.003"]
     argument_class = MakeTokenArguments
+    attributes = CommandAttributes(
+        supported_os=[SupportedOS.Windows]
+    )
 
     async def opsec_pre(self, taskData: PTTaskMessageAllData) -> PTTTaskOPSECPreTaskMessageResponse:
         """
diff --git a/Payload_Type/cazalla/cazalla/agent_functions/rev2self.py b/Payload_Type/cazalla/cazalla/agent_functions/rev2self.py
index 3aedbd5..fa74130 100644
--- a/Payload_Type/cazalla/cazalla/agent_functions/rev2self.py
+++ b/Payload_Type/cazalla/cazalla/agent_functions/rev2self.py
@@ -23,6 +23,9 @@ class Rev2SelfCommand(CommandBase):
     author = "@KaseyaOFSTeam"
     attackmapping = ["T1134.001"]
     argument_class = Rev2SelfArguments
+    attributes = CommandAttributes(
+        supported_os=[SupportedOS.Windows]
+    )
 
     async def opsec_pre(self, taskData: PTTaskMessageAllData) -> PTTTaskOPSECPreTaskMessageResponse:
         """
diff --git a/Payload_Type/cazalla/cazalla/agent_functions/screenshot.py b/Payload_Type/cazalla/cazalla/agent_functions/screenshot.py
index b6ad975..ebfcd44 100644
--- a/Payload_Type/cazalla/cazalla/agent_functions/screenshot.py
+++ b/Payload_Type/cazalla/cazalla/agent_functions/screenshot.py
@@ -25,6 +25,9 @@ class ScreenshotCommand(CommandBase):
     author = "@KaseyaOFSTeam"
     argument_class = ScreenshotArguments
     attackmapping = ["T1113"]
+    attributes = CommandAttributes(
+        supported_os=[SupportedOS.Windows]
+    )
 
     async def opsec_pre(self, taskData: PTTaskMessageAllData) -> PTTTaskOPSECPreTaskMessageResponse:
         """
diff --git a/Payload_Type/cazalla/cazalla/agent_functions/shell.py b/Payload_Type/cazalla/cazalla/agent_functions/shell.py
index 1d6905b..792a5b5 100644
--- a/Payload_Type/cazalla/cazalla/agent_functions/shell.py
+++ b/Payload_Type/cazalla/cazalla/agent_functions/shell.py
@@ -36,7 +36,7 @@ class ShellCommand(CommandBase):
     attackmapping = ["T1059"]
     argument_class = ShellArguments
     attributes = CommandAttributes(
-        supported_os=[SupportedOS.MacOS, SupportedOS.Linux, SupportedOS.Windows]
+        supported_os=[SupportedOS.Windows]
     )
 
     async def opsec_pre(self, taskData: PTTaskMessageAllData) -> PTTTaskOPSECPreTaskMessageResponse:
diff --git a/Payload_Type/cazalla/cazalla/agent_functions/steal_token.py b/Payload_Type/cazalla/cazalla/agent_functions/steal_token.py
index 5924be7..16b29ce 100644
--- a/Payload_Type/cazalla/cazalla/agent_functions/steal_token.py
+++ b/Payload_Type/cazalla/cazalla/agent_functions/steal_token.py
@@ -73,6 +73,9 @@ class StealTokenCommand(CommandBase):
     attackmapping = ["T1134.001"]
     supported_ui_features = ["process_browser:steal_token"]
     argument_class = StealTokenArguments
+    attributes = CommandAttributes(
+        supported_os=[SupportedOS.Windows]
+    )
 
     async def opsec_pre(self, taskData: PTTaskMessageAllData) -> PTTTaskOPSECPreTaskMessageResponse:
         """
diff --git a/Payload_Type/cazalla/cazalla/agent_functions/upload.py b/Payload_Type/cazalla/cazalla/agent_functions/upload.py
index ae56c93..a1304c3 100644
--- a/Payload_Type/cazalla/cazalla/agent_functions/upload.py
+++ b/Payload_Type/cazalla/cazalla/agent_functions/upload.py
@@ -66,6 +66,9 @@ class UploadCommand(CommandBase):
     supported_ui_features = ["file_browser:upload"]
     author = "@KaseyaOFSTeam"
     argument_class = UploadArguments
+    attributes = CommandAttributes(
+        supported_os=[SupportedOS.Windows]
+    )
 
     async def opsec_pre(self, taskData: PTTaskMessageAllData) -> PTTTaskOPSECPreTaskMessageResponse:
         """
diff --git a/Payload_Type/cazalla/cazalla/agent_functions/whoami.py b/Payload_Type/cazalla/cazalla/agent_functions/whoami.py
index 257e275..5a16575 100644
--- a/Payload_Type/cazalla/cazalla/agent_functions/whoami.py
+++ b/Payload_Type/cazalla/cazalla/agent_functions/whoami.py
@@ -23,6 +23,9 @@ class WhoamiCommand(CommandBase):
     author = "@KaseyaOFSTeam"
     attackmapping = ["T1083"]
     argument_class = WhoamiArguments
+    attributes = CommandAttributes(
+        supported_os=[SupportedOS.Windows]
+    )
 
     async def create_go_tasking(self, taskData: PTTaskMessageAllData) -> PTTaskCreateTaskingMessageResponse:
         response = PTTaskCreateTaskingMessageResponse(