search

z0noxz / powerstager

A payload stager using PowerShell
MIT License
183 stars 48 forks source link

type of powrshell payload #3

Closed ghost closed 7 years ago

ghost commented 7 years ago

first thanks for this great job, but i wonder witch type of powershell payload i choose with youe script!! .bat or .ps1 or just string.txt or what!! thanks

z0noxz commented 7 years ago

I'm not 100% sure I get your question (feel free to elaborate if I may have misunderstood you), but the intent of PowerStager is to stage anything that PowerShell can invoke or interpret. The stager then gets embedded into c source and compiled as an executable (.exe output). The stager can either stage locally embedded payloads or download them into memory from an external location (such as pastebin or other alike). I have implemented generation of a meterpreter shell stager inside the PowerStager (just as a PoC), but it's possible to stage any x86-compiled program using so called virtual allocation memory injection (in PowerShell). If you choose to stage a payload from URL then you can, for example, generate a payload from MSF or MSFVenom as 'psh'.

I'll probably implement functionality to generate PowerStager-ready scripts from any executable input and upload a video demonstration on this. I am currently in another country, and don't have access to my environment to make these changes, but will be back next week or this weekend.

Have I answered your question? :)

ghost commented 7 years ago

ok man , i understand ; thanks for your time..and take care of your self.