https://github.com/ccob/pwnyform
https://github.com/ccob/pwnyform
Last synced: about 1 year ago
JSON representation
- Host: GitHub
- URL: https://github.com/ccob/pwnyform
- Owner: CCob
- Created: 2020-09-16T21:26:37.000Z (almost 6 years ago)
- Default Branch: master
- Last Pushed: 2020-11-18T11:29:33.000Z (over 5 years ago)
- Last Synced: 2025-04-19T23:32:08.097Z (about 1 year ago)
- Language: C#
- Size: 22.5 KB
- Stars: 47
- Watchers: 4
- Forks: 6
- Open Issues: 1
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# PwnyForm
## Overview
PwnyForm will take an MSI installer as input and generate an MSI transform (mst) that can be used to inject arbitrary command execution by adding a custom action that will execute during the UI or Install sequence of an MSI file.
The generated MST produces a JScript custom action that will by default launch cmd.exe, the executed command can be overriden using the CMD MSI property
## Why
Generating an MST can be used as a method for adding custom behavior to signed MSI files without modifying the MSI itself, under the radar persistence or possibly breakout of restricted desktops environments if msiexec is allowed to execute.
## Usage
```cmd
PwnyForm by @_EthicalChaos_
Generates MST transform to inject arbitrary commands/custom actions when installing MSI files
-m, --msi=VALUE MSI file to base transform on (required)
-t, --mst=VALUE MST to generate that includes new custom action (
required)
-s, --sequence=VALUE Which sequence table should inject the custom
action into (UI (default) | Execute)
-o, --order=VALUE Which sequence number to use (defaults 1)
-h, --help Display this help
```
Example usage
```cmd
PwnyForm -m Setup.msi -t Pwnd.mst
msiexec -i Setup.msi CMD=cmd.exe TRANSFORMS=Pwnd.mst
```