added SwiftOnSysmon Flipper version
This commit is contained in:
parent
24cab4c2fb
commit
a24e959d00
2 changed files with 22 additions and 0 deletions
22
Payloads/Flip-SwiftOnSysmon/SwiftOnSysmon.txt
Normal file
22
Payloads/Flip-SwiftOnSysmon/SwiftOnSysmon.txt
Normal file
|
@ -0,0 +1,22 @@
|
||||||
|
REM TITLE Sysmon
|
||||||
|
REM AUTHOR Matze
|
||||||
|
REM Version: 1.0
|
||||||
|
REM Target: Windows
|
||||||
|
REM DESCRIPTION: A payload used to install Sysmon with the SwiftOnSecurity rules
|
||||||
|
|
||||||
|
DELAY 3000
|
||||||
|
GUI r
|
||||||
|
DELAY 500
|
||||||
|
STRING powershell saps PowerShell -verb runas
|
||||||
|
ENTER
|
||||||
|
REM The delay below is a longer delay for admins to put in passwords if needed.
|
||||||
|
DELAY 8000
|
||||||
|
REM Stage 2 (Downloading files)
|
||||||
|
STRING Invoke-WebRequest -Uri "DROPBOX LINK HERE" -OutFile "C:\sysmon.zip"
|
||||||
|
ENTER
|
||||||
|
DELAY 8000
|
||||||
|
STRING Expand-Archive C:\sysmon.zip -DestinationPath "C:\Sysmon"
|
||||||
|
ENTER
|
||||||
|
DELAY 5000
|
||||||
|
STRING C:\Sysmon\Sysmon.ps1
|
||||||
|
ENTER
|
BIN
Payloads/Flip-SwiftOnSysmon/Sysmon (1).zip
Normal file
BIN
Payloads/Flip-SwiftOnSysmon/Sysmon (1).zip
Normal file
Binary file not shown.
Loading…
Reference in a new issue