cn33liz / p0wnedshell Goto Github PK

Had to add the /recurse option to make it work: csc.exe [...] /recurse:"C:\p0wnedShell*.cs"
Awesome job btw!
Cheers

Unhandled Exception: System.TypeInitializationException: The Type initalizer for 'p0wnedShell.Execution' threw an excption. ---> System.IO.FileNotFoundException: Could not load file or assembly 'System.Management.Automation, Version=3.0.0.0, Cultrue=neutral, PublicKeyToken=

its good tools but i think old.. windows defender delete exe file :(

Hi,

i've compiled the project and created an amsi.dll with p0wnedShell which works great.

But I want to understand what the content of your AMSI.dll is.
I saw the two screenshots on your blog creating that dll in Visual Studio, but when I copy the content of your screenshot my AMSI.dll doesn't work.

Did you chance the content? What is it?

Thanks

I get the below error when i run mimikatz:

Unhandled Exception: System.NullReferenceException: Object reference not set to an instance of an object.
at rootReaver.PELoader..ctor(Byte[] fileBytes) in C:\Users\admin\Downloads\p0wnedShell-master\p0wnedShell-master\p0wnedShell\Resources\BinariesResources\p0wnedPELoader.cs:line 317
at rootReaver.BinaryLoader.LoadBinary(Byte[] exeBytes) in C:\Users\admin\Downloads\p0wnedShell-master\p0wnedShell-master\p0wnedShell\Resources\BinariesResources\p0wnedPELoader.cs:line 417
at rootReaver.Execution.MimiShell() in C:\Users\admin\Downloads\p0wnedShell-master\p0wnedShell-master\p0wnedShell\Modules\Injection\p0wnedExecute.cs:line 121
at rootReaver.Execution.Menu() in C:\Users\admin\Downloads\p0wnedShell-master\p0wnedShell-master\p0wnedShell\Modules\Injection\p0wnedExecute.cs:line 62
at rootReaver.Program.Entry() in C:\Users\admin\Downloads\p0wnedShell-master\p0wnedShell-master\p0wnedShell\p0wnedShell.cs:line 391
at rootReaver.Program.Main(String[] args) in C:\Users\admin\Downloads\p0wnedShell-master\p0wnedShell-master\p0wnedShell\p0wnedShell.cs:line 330

Just wondering what you had in mind with this comment in your code?

First: Thx for the great tool!
Second: My lab setup is the following:

• victim has applocker and ConstrainedLanguageMode active
• Code execution exists through ps remoting
• dll with tcp reverse shell code was downloaded onto the victim and executed via rundll32
• powercat listener receives the connection
• p0wnedshell is executed in the reverse shell using InstallUtil -> p0wnedshell menu is displayed

Now, if I select one of the options there is exactly zero output and the application must be closed by ^C
Probably it is some kind of redirection issue but the strange thing is that the menu is displayed correctly. Any ideas?