Creates a one-line command to download and install a TacticalRMM agent.

TacticalRMM One-Line Agent Deployer.md

TacticalRMM One-Line Agent Deployer

Creates a one-line command to download and install a TacticalRMM agent. It works by creating a script and converting it into a base64 command. It then copies the command to your clipboard, so you can paste it / save it as needed.

It also adds a temporary exclusion in Windows Defender to ensure the agent installs without any false positives. The exclusion is removed after the agent download is deleted.

Example

Optional - If you want to see the script that runs, you can convert the base64 encoding back to text...

TacticalRMM-OneLine-Agent-Deployer.ps1

# TacticalRMM One-Line Agent Deployer
#
# Description:
# This script takes the download agent URL and creates a one-line command that will download and install the agent
# It works by creating a script and converting it into a base64 command
# It then copies the command to your clipboard, so you can paste it / save it as needed
#
# Author: asheroto
# Author GitHub: https://github.com/asheroto
#
# Version 0.2

Write-Output ""
$agentURL = Read-Host "Agent URL"

$script = @'
# Set agent path
$agentPath = $(Join-Path -Path $($ENV:TEMP) -ChildPath "agent.exe")

# Add exclusion in Windows Defender
Add-MpPreference -ExclusionPath $agentPath

# Download agent
wget {{agentURL}} -o $agentPath

# Run agent silently
Start-Process -FilePath $agentPath -Args "-silent" -Wait

# Remove downloaded agent file
rm $agentPath

# Remove exclusion in Windows Defender
Remove-MpPreference -ExclusionPath $agentPath
'@ -Replace "{{agentURL}}",$agentURL

$s = $script
$j = [PSCustomObject]@{
  "Script" =  [System.Convert]::ToBase64String([System.Text.Encoding]::UTF8.GetBytes($s))
} | ConvertTo-Json -Compress

$oneline = "[System.Text.Encoding]::UTF8.GetString([System.Convert]::FromBase64String(('" + $j + "' | ConvertFrom-Json).Script)) | iex"

$c = [convert]::ToBase64String([System.Text.encoding]::Unicode.GetBytes($oneline))

$output = ("Powershell -NoLogo -NonInteractive -NoProfile -ExecutionPolicy Bypass -Encoded " + $c)

$output | Set-Clipboard

Write-Output ""
Write-Output "One line command copied to clipboard:"
Write-Output ""
Write-Output $output
Write-Output ""

You know, I actually haven't used TacticalRMM in a few years. If I remember correctly, you don't want to have the URLs easily publicly accessible because it may expose some sensitive information. According to ChatGPT this is the case, but honestly I don't remember as it's been too long.

I wont be handing out that url to anyone, just pasting it into the tool you created then manually running the install over ssh.

can you confirm if the deployment url what it is asking for when it says "AGENT URL:"

Thanks again for making this tool!

I'm really not sure, haha. My memory is failing me. I wrote this in 2021 and haven't used TacticalRMM since around that time.