Comments (5)
interesting idea, I'll do some research about it.
Thanks!
from silenttrinity.
Might potentially be able to use the ZipPackage class with compatibility back to .NET 3.0. It would impose some requirements on the format of the zip file, though:
its not possible to just use a third-party tool like 7-zip to create the zip files because the client side code can't open it -- ZipPackage adds a hidden file describing the content type of each component file and cannot open a zip file if that content type file is missing.
from silenttrinity.
Using the Shell32
class is not a good option because you can't decompress streams. ZipStorer is great since you can use streams. Anyways the minimum version could be 4.0
because IronPython.dll
is set on 4.0
and TLS 1.1 and TLS 1.2 is only available since .NET 4.0
from silenttrinity.
Related PR #55, @davidtavarez got the .NET version down to 4.0 which is an amazing start
from silenttrinity.
The new windows stager (Naga) works with .NET 4.0, anything less than that will not work unfortunately due to Boolang requirements.
This isn't a big deal in my mind just cause you can revert back to using Powershell attacks on anything with .NET < 4.0 as it doesn't have AMSI or anything else.
Closing.
from silenttrinity.
Related Issues (20)
- [Feature Request] Linked Docker Hub builds HOT 1
- Sessions do not appear on client HOT 1
- Update Install Documentation HOT 1
- [BUG] 'PromptSession' object has no attribute 'prompt_async' HOT 3
- Cannot use staged payloads (only stageless) [BUG] HOT 5
- upload.py: module 'module' has no attribute 'STModule' HOT 2
- [BUG] Unable to perform http POST request using exe stager HOT 5
- Could not find a version that satisfies the requirement Hypercorn==0.9.0
- [BUG] env -S not supported on Ubuntu 18.04 HOT 1
- Boo casting exception when executing modules HOT 5
- [FEATURE REQUEST] Implicitly set rhost value in stagers
- [enhancement] Implicitly set rhost value for stargers HOT 1
- [BUG] Unhandled exception in event loop HOT 1
- [BUG]
- [BUG] Not able to run st.py HOT 1
- Stagers never complete. HOT 3
- [BUG]Multi Operator Setup
- [BUG] Silenttrinity Client strait lines not showing up HOT 1
- [BUG] Client crashes after using any command HOT 1
- Got error while using boo/inject
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from silenttrinity.