Created
June 13, 2021 22:12
-
-
Save alichtman/54719463512512c5730c040c492144cc to your computer and use it in GitHub Desktop.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
:: Windows 10 OSED Setup | |
:: | |
:: Connect over RDP with: rdesktop IP -u Offsec -p lab -r disk:kali=/home/kali/OSED/ -P | |
:: Store files in ~/OSED/files/. Check script for appropriate file locations | |
:: | |
:: Extra files sourced from: https://github.com/corelan/windbglib | |
:: | |
:::::::::::::::::::::::::::::::::::::::::::::::::::::::: | |
:: Install mona | |
COPY \\tsclient\kali\files\mona\pykd\vcredist_x86.exe C:\vcredist_x86.exe | |
runas /user:CLIENT\Administrator /savecred C:\vcredist_x86.exe | |
PAUSE | |
COPY \\tsclient\kali\files\mona\pykd\pykd.pyd "C:\Program Files\Windows Kits\10\Debuggers\x86\winext" | |
runas /user:CLIENT\Administrator /savecred "regsvr32 \"C:\Program Files\Common Files\Microsoft Shared\VC\msdia90.dll\"" | |
PAUSE | |
COPY \\tsclient\kali\files\mona\windbglib.py "C:\Program Files\Windows Kits\10\Debuggers\x86" | |
COPY \\tsclient\kali\files\mona\mona.py "C:\Program Files\Windows Kits\10\Debuggers\x86" | |
:: Install Python 2.7.13 | |
COPY \\tsclient\kali\files\mona\python-2.7.13.msi C:\python-2.7.13.msi | |
msiexec.exe /i c:\python-2.7.13.msi ALLUSERS="1" /passive | |
set PYTHONPATH="C:\Python27\" | |
set PATH "C:\Python27;C:\Python27\Scripts;%path%;" | |
setx PATH "C:\Python27;C:\Python27\Scripts;%path%;" | |
PAUSE | |
:: Install pykd | |
COPY \\tsclient\kali\files\mona\pykd\pykd-0.3.4.15-cp27-none-win32.whl C:\pykd-0.3.4.15-cp27-none-win32.whl | |
C:\Python27\Scripts\pip2.7 install C:\pykd-0.3.4.15-cp27-none-win32.whl | |
ECHO REMEMBER TO RUN .load pykd" IN WINDBG | |
PAUSE | |
:: Open WinDbg with pleasant colorscheme | |
runas /user:CLIENT\Administrator /savecred "\"C:\Program Files\Windows Kits\10\Debuggers\x86\windbg.exe\" -WF \\tsclient\kali\files\dark-green-x64.wew" |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment