jgrunzweig

### Keybase proof

I hereby claim:

  * I am jgrunzweig on github.
  * I am jgrunz (https://keybase.io/jgrunz) on keybase.
  * I have a public key ASCT9na91k4AcGgP_0Ir3l4Fqf0VBAJ0oMNzF0eZh4SCTgo

To claim this, I am signing this object:

jgrunzweig

Download yara

    https://github.com/virustotal/yara/releases/tag/v3.10.0 (or similar URL)
    
Install yara

    ./bootstrap.sh
    ./configure --enable-cuckoo --enable-magic --enable-dotnet
    make
    sudo make install

jgrunzweig

function Install-Immunity($path)
{
	Write-Host "Installing Immunity"
	Write-Host $path
	$p = Start-Process $path
	Sleep 5;
	$wshell = New-Object -ComObject wscript.shell;
	$wshell.AppActivate('Immunity Debugger Setup');
	$wshell.SendKeys('~');
	Sleep 5;

jgrunzweig

require 'sinatra'
require 'net/scp'

get '/provision' do
  file = 'CONFIGS!....txt'
  f = File.new(file, 'w')
  f.write(params[:ip])
  f.write('other stuff')
  f.close
  Net::SCP.upload!("remote.host.com", "username",  file, "/remote/path",  :ssh => { :password => "password" })

jgrunzweig

OPTION EXPLICIT

DIM CRLF, TAB
DIM strServer
DIM objWebService
DIM WebSvcObj

dim webID
dim DllName
dim strScriptMap