This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
param ([string]$ScriptName = "🚀GPO-Piss-Nuker💦.ps1", [string]$RepoPath = "C:\Users\frits\github\ai-script-execution-logs💦", [string]$LogPrefix = "LauncherTest") | |
$VerbosePreference = "Continue"; Set-Location $RepoPath; git pull origin main 2>&1 | Write-Verbose | |
$LocalScript = "$RepoPath\scripts_grok\$ScriptName"; if (-not (Test-Path $LocalScript)) { | |
Write-Verbose "🗂️ Gisting raw fallback... 💦"; $GistOut = gh gist list | Select-String $ScriptName | Select-Object -First 1; $GistId = ($GistOut.Line -replace '.*github\.com/[^\s]+/([a-f0-9]{32,}).*','$1') | |
$User = (gh api user | ConvertFrom-Json).login; $RawUrl = "https://gist.githubusercontent.com/$User/$GistId/raw/$ScriptName" | |
$LocalScript = "$env:TEMP\$ScriptName"; Invoke-WebRequest -Uri $RawUrl -OutFile $LocalScript 2>&1 | Write-Verbose | |
} | |
Write-Verbose "✅ Script loaded: $LocalScript 😏"; $LogFile = "$RepoPath\logs\$LogPrefix`_$((Get-Date).ToString('yyyy-MM-dd_HH-mm-ss'))_$ScriptName.log" | |
Start-Transcript -Path $LogFile -Verbose; & $LocalScript; Stop-Tr |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
param ([string]$Payload = "# Dummy: Your script here! 😜", [string]$OutputDir = "C:\temp\PissArtifacts", [string]$FileName = "SavedPiss_$(Get-Date -Format 'yyyyMMdd_HHmmss').ps1") | |
$VerbosePreference = "Continue"; function Log-PissSave { param([string]$Msg); Write-Verbose $Msg; Write-Host $Msg -ForegroundColor Cyan } | |
Log-PissSave "🧠 Saving Payload to $OutputDir\$FileName ..."; if (-not (Test-Path $OutputDir)) { New-Item $OutputDir -ItemType Directory -Force | Out-Null } | |
$Payload | Out-File (Join-Path $OutputDir $FileName) -Encoding UTF8; Log-PissSave "💥 Artifact Pissed to Eternity! Open in VS Code 🖥️😈" |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
param ([switch]$SkipScan) | |
$VerbosePreference = "Continue"; function Log-Message { param([string]$Msg); Write-Verbose $Msg; Write-Host $Msg -ForegroundColor Cyan } | |
Log-Message "🔪 Killing Chrome..."; Get-Process chrome -ErrorAction SilentlyContinue | Stop-Process -Force | |
Log-Message "🗑️ Nuking Reg Keys..."; $RegPaths = @("HKCU:\Software\Google\Chrome", "HKLM:\Software\Google\Chrome", "HKLM:\Software\Policies\Google\Chrome", "HKLM:\Software\Policies\Google\Update", "HKLM:\Software\WOW6432Node\Google\Enrollment") | |
foreach ($Path in $RegPaths) { if (Test-Path $Path) { Remove-Item $Path -Recurse -Force; Log-Message "${Path} deleted! 💦" } } | |
$TokenPath = "HKLM:\Software\WOW6432Node\Google\Update\ClientState\{430FD4D0-B729-4F61-AA34-91526481799D}"; if (Test-Path $TokenPath) { Remove-ItemProperty $TokenPath -Name "CloudManagementEnrollmentToken" -ErrorAction SilentlyContinue; Log-Message "Token flushed! 😂" } | |
Log-Message "🚽 Flushing Extensions..."; $ChromeData = "$env:LOCALAPPDATA\Google\Chrome\User Data\Default\Extension |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
param ([switch]$SkipSecurityFlush) | |
$MachinePolicy = "$env:WinDir\System32\GroupPolicy"; $UserPolicy = "$env:WinDir\System32\GroupPolicyUsers" | |
$VerbosePreference = "Continue"; function Log-Message { param([string]$Msg); Write-Verbose $Msg; Write-Host $Msg -ForegroundColor Cyan } | |
Log-Message "💥 Nuking Machine Policies! 🤖"; if (Test-Path $MachinePolicy) { Get-ChildItem $MachinePolicy -Recurse | Remove-Item -Recurse -Force; Log-Message "Flushed! 💦" } | |
Log-Message "👻 Nuking User Policies! 👤"; if (Test-Path $UserPolicy) { Get-ChildItem $UserPolicy -Recurse | Remove-Item -Recurse -Force; Log-Message "Gone! ✨" } | |
Log-Message "🔄 gpupdate /force..."; gpupdate /force 2>&1 | Write-Verbose | |
if (-not $SkipSecurityFlush) { | |
Log-Message "🛡️ Sec Flush Bonus!"; $TempSec = "$env:TEMP\secflush"; New-Item -Path $TempSec -ItemType Directory -Force | Out-Null | |
cmd /c "secedit /configure /cfg `%windir%`\inf`\defltbase.inf /db `"$TempSec`\defltbase.sdb`" /verbose" 2>&1 | Write-Verbose; gpupdate /force 2>&1 | Write-Verbose | |
Rem |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
param ([switch]$SkipScan) | |
$VerbosePreference = "Continue"; function Log-Message { param([string]$Msg); Write-Verbose $Msg; Write-Host $Msg -ForegroundColor Cyan } | |
Log-Message "🔪 Killing Chrome..."; Get-Process chrome -ErrorAction SilentlyContinue | Stop-Process -Force | |
Log-Message "🗑️ Nuking Reg Keys..."; $RegPaths = @("HKCU:\Software\Google\Chrome", "HKLM:\Software\Google\Chrome", "HKLM:\Software\Policies\Google\Chrome", "HKLM:\Software\Policies\Google\Update", "HKLM:\Software\WOW6432Node\Google\Enrollment") | |
foreach ($Path in $RegPaths) { if (Test-Path $Path) { Remove-Item $Path -Recurse -Force; Log-Message "${Path} deleted! 💦" } } | |
$TokenPath = "HKLM:\Software\WOW6432Node\Google\Update\ClientState\{430FD4D0-B729-4F61-AA34-91526481799D}"; if (Test-Path $TokenPath) { Remove-ItemProperty $TokenPath -Name "CloudManagementEnrollmentToken" -ErrorAction SilentlyContinue; Log-Message "Token flushed! 😂" } | |
Log-Message "🚽 Flushing Extensions..."; $ChromeData = "$env:LOCALAPPDATA\Google\Chrome\User Data\Default\Extension |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
param ([switch]$SkipSecurityFlush) | |
$MachinePolicy = "$env:WinDir\System32\GroupPolicy"; $UserPolicy = "$env:WinDir\System32\GroupPolicyUsers" | |
$VerbosePreference = "Continue"; function Log-Message { param([string]$Msg); Write-Verbose $Msg; Write-Host $Msg -ForegroundColor Cyan } | |
Log-Message "💥 Nuking Machine Policies! 🤖"; if (Test-Path $MachinePolicy) { Get-ChildItem $MachinePolicy -Recurse | Remove-Item -Recurse -Force; Log-Message "Flushed! 💦" } | |
Log-Message "👻 Nuking User Policies! 👤"; if (Test-Path $UserPolicy) { Get-ChildItem $UserPolicy -Recurse | Remove-Item -Recurse -Force; Log-Message "Gone! ✨" } | |
Log-Message "🔄 gpupdate /force..."; gpupdate /force 2>&1 | Write-Verbose | |
if (-not $SkipSecurityFlush) { Log-Message "🛡️ Sec Flush Bonus!"; cmd /c "secedit /configure /cfg `%windir%`\inf`\defltbase.inf /db defltbase.sdb /verbose" 2>&1 | Write-Verbose; gpupdate /force 2>&1 | Write-Verbose } | |
Log-Message "🎉 GPO Freedom Achieved! Reboot: Restart-Computer -Force 😜" |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
param ([switch]$SkipSecurityFlush) | |
$MachinePolicy = "$env:WinDir\System32\GroupPolicy" | |
$UserPolicy = "$env:WinDir\System32\GroupPolicyUsers" | |
$VerbosePreference = "Continue" | |
function Log-Message { param([string]$Msg); Write-Verbose $Msg; Write-Host $Msg -ForegroundColor Cyan } | |
Log-Message "💥 Nuking Machine Policies! 🤖" | |
if (Test-Path $MachinePolicy) { Get-ChildItem $MachinePolicy -Recurse | Remove-Item -Recurse -Force; Log-Message "Flushed! 💦" } | |
Log-Message "👻 Nuking User Policies! 👤" | |
if (Test-Path $UserPolicy) { Get-ChildItem $UserPolicy -Recurse | Remove-Item -Recurse -Force; Log-Message "Gone! ✨" } | |
Log-Message "🔄 gpupdate /force..." |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
<################################################################ | |
# Embedded Core: Piss-Artifact Saver! 📝💥 | |
param ( | |
[string]$Payload = "# Dummy: Your script here! 😜", | |
[string]$OutputDir = "C:\temp\PissArtifacts", | |
[string]$FileName = "SavedPiss_$(Get-Date -Format 'yyyyMMdd_HHmmss').ps1" | |
) | |
$VerbosePreference = "Continue" | |
function Log-PissSave { param([string]$Msg); Write-Verbose $Msg; Write-Host $Msg -ForegroundColor Cyan } |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
<################################################################ | |
# Embedded Core: Chrome Org Nuker Fixed! 🪟💥 | |
param ([switch]$SkipScan) | |
$VerbosePreference = "Continue" | |
function Log-Message { param([string]$Msg); Write-Verbose $Msg; Write-Host $Msg -ForegroundColor Cyan } | |
Log-Message "🔪 Killing Chrome..." | |
Get-Process chrome -ErrorAction SilentlyContinue | Stop-Process -Force |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
<################################################################ | |
# Embedded Core: Ultimate GPO Nuker Payload! 🤖👤🚽 | |
param ([switch]$SkipSecurityFlush) | |
$MachinePolicy = "$env:WinDir\System32\GroupPolicy" | |
$UserPolicy = "$env:WinDir\System32\GroupPolicyUsers" | |
$VerbosePreference = "Continue" | |
function Log-Message { param([string]$Msg); Write-Verbose $Msg; Write-Host $Msg -ForegroundColor Cyan } |
NewerOlder