The write-up for 2.54 needs to be updated to allow for the implant to load PS modules. Using the current documentation, loadmodule InvokeWmiPersist.ps1 results with the following error:
Task 00011 (T3rm1nal) issued against implant 1 on host initech\SYSTEM* @ INITECH-Z3B1 (2021-07-20 17:51:32)
loadmodule InvokeWmiPersist.ps1
The multicmd errored:
Error: System.FormatException: The input is not a valid Base-64 string as it contains a non-base 64 character, more than two padding characters, or an illegal character among the padding characters.
at System.Convert.FromBase64_ComputeResultLength(Char* inputPtr, Int32 inputLength)
at System.Convert.FromBase64CharPtr(Char* inputPtr, Int32 inputLength)
at System.Convert.FromBase64String(String s)
at Program.ImplantCore(String baseURL, String RandomURI, String stringURLS, String KillDate, String Sleep, String Key, String stringIMGS, String Jitter)
Description
The write-up for 2.54 needs to be updated to allow for the implant to load PS modules. Using the current documentation,
loadmodule InvokeWmiPersist.ps1
results with the following error: