Skip to content

Instantly share code, notes, and snippets.

@alichtman
Created June 13, 2021 22:12
Show Gist options
  • Star 2 You must be signed in to star a gist
  • Fork 2 You must be signed in to fork a gist
  • Save alichtman/54719463512512c5730c040c492144cc to your computer and use it in GitHub Desktop.
Save alichtman/54719463512512c5730c040c492144cc to your computer and use it in GitHub Desktop.
:: Windows 10 OSED Setup
::
:: Connect over RDP with: rdesktop IP -u Offsec -p lab -r disk:kali=/home/kali/OSED/ -P
:: Store files in ~/OSED/files/. Check script for appropriate file locations
::
:: Extra files sourced from: https://github.com/corelan/windbglib
::
::::::::::::::::::::::::::::::::::::::::::::::::::::::::
:: Install mona
COPY \\tsclient\kali\files\mona\pykd\vcredist_x86.exe C:\vcredist_x86.exe
runas /user:CLIENT\Administrator /savecred C:\vcredist_x86.exe
PAUSE
COPY \\tsclient\kali\files\mona\pykd\pykd.pyd "C:\Program Files\Windows Kits\10\Debuggers\x86\winext"
runas /user:CLIENT\Administrator /savecred "regsvr32 \"C:\Program Files\Common Files\Microsoft Shared\VC\msdia90.dll\""
PAUSE
COPY \\tsclient\kali\files\mona\windbglib.py "C:\Program Files\Windows Kits\10\Debuggers\x86"
COPY \\tsclient\kali\files\mona\mona.py "C:\Program Files\Windows Kits\10\Debuggers\x86"
:: Install Python 2.7.13
COPY \\tsclient\kali\files\mona\python-2.7.13.msi C:\python-2.7.13.msi
msiexec.exe /i c:\python-2.7.13.msi ALLUSERS="1" /passive
set PYTHONPATH="C:\Python27\"
set PATH "C:\Python27;C:\Python27\Scripts;%path%;"
setx PATH "C:\Python27;C:\Python27\Scripts;%path%;"
PAUSE
:: Install pykd
COPY \\tsclient\kali\files\mona\pykd\pykd-0.3.4.15-cp27-none-win32.whl C:\pykd-0.3.4.15-cp27-none-win32.whl
C:\Python27\Scripts\pip2.7 install C:\pykd-0.3.4.15-cp27-none-win32.whl
ECHO REMEMBER TO RUN .load pykd" IN WINDBG
PAUSE
:: Open WinDbg with pleasant colorscheme
runas /user:CLIENT\Administrator /savecred "\"C:\Program Files\Windows Kits\10\Debuggers\x86\windbg.exe\" -WF \\tsclient\kali\files\dark-green-x64.wew"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment