TVT618

Winpayloads - Undetectable Windows Payload Generation

Aug 14th, 2018
174
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.78 KB | None | 0 0
  1. Winpayloads: Undetectable Windows Payload Generation with extras Running on Python 2.7.x
  2.  
  3. As usual, Don't upload payloads to any online virus checkers
  4. Virus Total Detection - Updated 30/9/2016 - Detected by 8 AV
  5. https://www.virustotal.com/en/file/23a24f99c3c6c00cd4bf6cb968f813ba2ceadfa846c7f169f412bcbb71ba6573/analysis/1475232549/
  6.  
  7. For Fully Undetectable Payloads please use the stager functionality Youtube Video
  8.  
  9. Features:
  10. * UACBypass - PowerShellEmpire https://github.com/PowerShellEmpire/Empire/raw/master/data/module_source/privesc/Invoke-BypassUAC.ps1 Copyright (c) 2015, Will Schroeder and Justin Warner. All rights reserved.
  11. * PowerUp - PowerShellEmpire https://raw.githubusercontent.com/PowerShellEmpire/PowerTools/master/PowerUp/PowerUp.ps1 Copyright (c) 2015, Will Schroeder and Justin Warner. All rights reserved.
  12. * Invoke-Shellcode https://github.com/PowerShellMafia/PowerSploit/blob/master/CodeExecution/Invoke-Shellcode.ps1 Copyright (c) 2012, Matthew Graeber. All rights reserved.
  13. * Invoke-Mimikatz https://github.com/PowerShellMafia/PowerSploit/blob/master/Exfiltration/Invoke-Mimikatz.ps1 Copyright (c) 2012, Matthew Graeber. All rights reserved.
  14. * Invoke-EventVwrBypass https://github.com/enigma0x3/Misc-PowerShell-Stuff/blob/master/Invoke-EventVwrBypass.ps1 Matt Nelson (@enigma0x3)
  15. * Persistence - Adds payload persistence on reboot
  16. * Psexec Spray - Spray hashes until successful connection and psexec payload on target
  17. * Upload to local webserver - Easy deployment
  18. * Powershell stager - allows invoking payloads in memory & more
  19.  
  20. Check out the Wiki for installation and more! https://github.com/nccgroup/Winpayloads/wiki
  21.  
  22. Video and Information on Blog (OUTDATED): https://charliedean.github.io
  23.  
  24. Download Winpayloads: https://github.com/nccgroup/Winpayloads
Advertisement
Add Comment
Please, Sign In to add comment