its too simple to kill firewalls once you can get files into the machine...
thanks for the bitchin code!

with this VBS scrip from boshcash i can upload serv-u to Taget IP and start it.
But i can not connect to my STRO.
How can i connect to my stro? can some one help me?

hey cool, very nice, exactly what i was looking for!!

nice thanks alot !

ty

Thanks a lot, but I discovered why it at first would not work for me.
You NEED a space before >/>>

wow dude that's new to me - looks very cool! thx

Thanks boshcash, I am going to test this on a friends box and see what kind of results we get, I believe he runs Kapersky AV, didnt notice anyone mention if Kapersky picks it up.
will be great to have a working alternative to ftp and tftp.

mm , i need u guys to try to use the write to file ">" using other thing than echo command , maybe we can create a file without any restrictions .. i still cant put the < and> signs at the text ..

this realy helped

my regards

i think the problem is with the exe file....

i have a idea if you make a exe file in mime (base64) file
and put it one a page..
now download the page extracted the file and open it..


or trai to change the .exe to .pif maybe it works then..

pimp way to download a file remotely. ftp has never given me a problem but this is nice

why not use wget?
With wget.exe you can download files from http/ftp/etc..
So you can do the same, no?

kewl i will test that thx

nice share, thanks.. ill try it soon

wget isnt installed with windows by the way , its not found except if someone already got it ..

fantastic!!!!!
but if you wanted to upload more than file as I modify the code?
Thanks


Bye

yes of course change the code or make the first upload to be a web downloader like dhttp or a RAT with upload feature

Thanks a lot seems very useful.

Well this could be very usefull, thank you very much!

UC

great tip. gonna have to try this out

i`ve tried this an it wordked very good but on some systems it doesn`t work i don`t know why. But this script is a very good work!Thank you 1000 times

to knew the ip

hi boshcash,

there is a way to include the "<" and ">" you only have to prefix "^"

so

thanks a lot brOmstar

bromster thanks anyway someone told me this hint 2 weeks ago , and its very very useful hint .. with that im planning to improve my way , i can write the way to echo a vbs file that writes an exe file without file download , so it wont be detected as virus as i think , i will also think of ways to make all text executables

Thanks All
Very nice topic
I think it worse to try it

Thank you!!!

cool script, thanks

great script thx

yeah thats a really nice method so the admins think that this is a normal vb script but we did it h3h3


sorry 4 my bad english ;D


gr€€tZ flasHb4Ck

and thanx anyway

using vbs script is crap, nearly all AV will kill it, which apart from stopping your fun and games, will mean the "vic" is alerted to your attack.

Why not do something like use a bat2exe prog, and simply use ftp??? there's really not much to go wrong.

i think that this has been discussed in previous posts...

sometimes ftp.exe is deleted .. sometimes u dont have except this way ... i need to know another way to echo any text file to be converted to exe ..

works fine
nice one m8
very usefull

Could you take this, put it in a bat file -> EXE -> morphine then no detection?

how could i upload morphine to victim without even sending him a program to work the file transfer ?! guys understand what i am trying to do , then comment plz ..

vbs script doesn't get detected until I echo this line:

SendBinary.SaveToFile "c:\file.exe", adSaveCreateOverWrite

any way around this and still get it to work?

if you already have access to CMD you can stop mcafee.... net stop (service)
anyways very nice method thx

mr anderson is right , i think we can stop some of the AVs by net stopping service name , also if anyone knows any vbscript that doesnt get detected as a malicous script , and can write/download a file , that would help alot ..

The script works fine for me,
thx alot for this

i used them when ftp.exe is disabled

this way really rulz.
i prove it in mi pc and works, even the .bat style.
but when i try echo it via sqlexec(gui) it say SQL Error, any advice?

tnx dude! for usefull

Yeah very nice proggie dude.

Thanks for sharing

hey all.
im looking for vbs base64 decode function binary safe.
everything i found-- strips out some characters ...

if you got anything- i'd really appreciate it.
thanx.

igs , im looking for a better methos too , why dont u try using the mac-binhex format its better than base64 ..

looks very interesting...

Will try it, the problem is that i don't have an HTTP server to upload from, well i'll see what i can do.

EDIT
Kewl, on my comp it worked, now time to test it with remote comp.
Nope, couldn't upload anything on remote computer, but i'll try somewhere else too.

very nice post, thnx dude

I test it, it works fine on my computer, but remote it works only if you have system rights

i have changed the code a little

now, it works very good

the best idea is trying to hide a vbs script by encoding or writing a binary to the system by using base64 or macbinhex anyone can do that , to use it with cmdshell , for more info on mac-binhex encoding see the my.pics.zip malware's browser exploit ... (as an example)