├── Chapter2 ├── empire_stager.ps1 ├── landingPage.html ├── meter_psh.ps1 ├── reverse.vba ├── reverse_ps.ps1 ├── reverse_ps_breaks.ps1 └── reverse_ps_encoded.ps1 ├── Chapter3 └── socks.cpp ├── Chapter4 ├── mass_mimi.ps1 ├── mass_mimi_RPC ├── mimi.ps1 └── mimi_tobase64 ├── Chapter5 ├── Do-Exfiltration ├── GPO-edit.ps1 └── aesEncrypt.ps1 ├── Chapter6 └── COPY.JCL └── README.md /Chapter2/empire_stager.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sparcflow/SlashPaulHoldings/HEAD/Chapter2/empire_stager.ps1 -------------------------------------------------------------------------------- /Chapter2/landingPage.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sparcflow/SlashPaulHoldings/HEAD/Chapter2/landingPage.html -------------------------------------------------------------------------------- /Chapter2/meter_psh.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sparcflow/SlashPaulHoldings/HEAD/Chapter2/meter_psh.ps1 -------------------------------------------------------------------------------- /Chapter2/reverse.vba: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sparcflow/SlashPaulHoldings/HEAD/Chapter2/reverse.vba -------------------------------------------------------------------------------- /Chapter2/reverse_ps.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sparcflow/SlashPaulHoldings/HEAD/Chapter2/reverse_ps.ps1 -------------------------------------------------------------------------------- /Chapter2/reverse_ps_breaks.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sparcflow/SlashPaulHoldings/HEAD/Chapter2/reverse_ps_breaks.ps1 -------------------------------------------------------------------------------- /Chapter2/reverse_ps_encoded.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sparcflow/SlashPaulHoldings/HEAD/Chapter2/reverse_ps_encoded.ps1 -------------------------------------------------------------------------------- /Chapter3/socks.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sparcflow/SlashPaulHoldings/HEAD/Chapter3/socks.cpp -------------------------------------------------------------------------------- /Chapter4/mass_mimi.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sparcflow/SlashPaulHoldings/HEAD/Chapter4/mass_mimi.ps1 -------------------------------------------------------------------------------- /Chapter4/mass_mimi_RPC: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sparcflow/SlashPaulHoldings/HEAD/Chapter4/mass_mimi_RPC -------------------------------------------------------------------------------- /Chapter4/mimi.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sparcflow/SlashPaulHoldings/HEAD/Chapter4/mimi.ps1 -------------------------------------------------------------------------------- /Chapter4/mimi_tobase64: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sparcflow/SlashPaulHoldings/HEAD/Chapter4/mimi_tobase64 -------------------------------------------------------------------------------- /Chapter5/Do-Exfiltration: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sparcflow/SlashPaulHoldings/HEAD/Chapter5/Do-Exfiltration -------------------------------------------------------------------------------- /Chapter5/GPO-edit.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sparcflow/SlashPaulHoldings/HEAD/Chapter5/GPO-edit.ps1 -------------------------------------------------------------------------------- /Chapter5/aesEncrypt.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sparcflow/SlashPaulHoldings/HEAD/Chapter5/aesEncrypt.ps1 -------------------------------------------------------------------------------- /Chapter6/COPY.JCL: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sparcflow/SlashPaulHoldings/HEAD/Chapter6/COPY.JCL -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/sparcflow/SlashPaulHoldings/HEAD/README.md --------------------------------------------------------------------------------