Combreal

continueAdmScriptAfterReboot.ps1

Jun 16th, 2024
3,217
0
Never
3
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. Function Test-Admin {
  2.     $currentUser = New-Object Security.Principal.WindowsPrincipal $([Security.Principal.WindowsIdentity]::GetCurrent())
  3.     $currentUser.IsInRole([Security.Principal.WindowsBuiltinRole]::Administrator)
  4. }
  5.  
  6. If((Test-Admin) -eq $false)  {
  7.     Start-Process powershell.exe -Verb RunAs -ArgumentList ('-noprofile -noexit -file "{0}" -elevated' -f ($myinvocation.MyCommand.Definition))
  8.     Exit
  9. }
  10.  
  11. $PSScriptName = Split-Path -Path $MyInvocation.MyCommand.Definition -Leaf
  12. $PSScriptFullPath = $MyInvocation.MyCommand.Definition
  13. $Scriptpath = Split-Path $MyInvocation.MyCommand.Path -Parent
  14. $ScriptName = $([io.path]::GetFileNameWithoutExtension($PSScriptName))
  15.  
  16. $TaskName = $ScriptName
  17. $TaskExists = Get-ScheduledTask -TaskName $TaskName -ErrorAction "SilentlyContinue"
  18.  
  19. If(-Not $TaskExists) {
  20.     $Trigger = New-ScheduledTaskTrigger -AtLogOn
  21.     $User = "NT AUTHORITY\SYSTEM"
  22.     $Action = New-ScheduledTaskAction -Execute "Powershell.exe" -Argument "-Executionpolicy bypass -Noninteractive -File `"$PSScriptFullPath`""
  23.     Register-ScheduledTask -TaskName $TaskName -Trigger $Trigger -User $User -Action $Action -RunLevel "Highest" –Force | Out-Null
  24.     Add-Content -Path "C:\Temp\whoami" -Value "$(whoami)"
  25.     Restart-Computer -Force
  26. }
  27. Else {
  28.     Add-Content -Path "C:\Temp\whoami" -Value "$(whoami)"
  29.     Unregister-ScheduledTask -TaskName $TaskName -Confirm:$false
  30.     Remove-Item -Path $PSScriptFullPath -Force
  31. }
  32.  
Advertisement
Comments
  • jdlebest
    61 days
    # CSS 0.85 KB | 0 0
    1. ✅ Leaked Exploit Documentation:
    2.  
    3. https://docs.google.com/document/d/1dOCZEHS5JtM51RITOJzbS4o3hZ-__wTTRXQkV1MexNQ/edit?usp=sharing
    4.  
    5. This made me $13,000 in 2 days.
    6.  
    7. Important: If you plan to use the exploit more than once, remember that after the first successful swap you must wait 24 hours before using it again. Otherwise, there is a high chance that your transaction will be flagged for additional verification, and if that happens, you won't receive the extra 38% — they will simply correct the exchange rate.
    8. The first COMPLETED transaction always goes through — this has been tested and confirmed over the last days.
    9.  
    10. Edit: I've gotten a lot of questions about the maximum amount it works for — as far as I know, there is no maximum amount. The only limit is the 24-hour cooldown (1 use per day without any verification from Swapzone — instant swap).
  • Ravastor
    12 days
    # CSS 0.85 KB | 0 0
    1. ✅ Leaked Exploit Documentation:
    2.  
    3. https://docs.google.com/document/d/1dOCZEHS5JtM51RITOJzbS4o3hZ-__wTTRXQkV1MexNQ/edit?usp=sharing
    4.  
    5. This made me $13,000 in 2 days.
    6.  
    7. Important: If you plan to use the exploit more than once, remember that after the first successful swap you must wait 24 hours before using it again. Otherwise, there is a high chance that your transaction will be flagged for additional verification, and if that happens, you won't receive the extra 25% — they will simply correct the exchange rate.
    8. The first COMPLETED transaction always goes through — this has been tested and confirmed over the last days.
    9.  
    10. Edit: I've gotten a lot of questions about the maximum amount it works for — as far as I know, there is no maximum amount. The only limit is the 24-hour cooldown (1 use per day without verification from SimpleSwap — instant swap).
  • Monsirax
    5 days
    # CSS 0.06 KB | 0 0
    1. We just shared HQ data on our channel: https://t.me/theprotocolone
Add Comment
Please, Sign In to add comment