top of page
Search

StarFighters

A JavaScript and VBScript Based Empire Launcher, which runs within their own embedded PowerShell Host.

Both Launchers run within their own embedded PowerShell Host, so we don't need PowerShell.exe.

This might be usefull when a company is blocking PowerShell.exe and/or is using a Application Whitelisting solution, but does not block running JS/VBS files.

Usage:

  • Setup a new Listener within PowerShell Empire

  • Use the Launcher command to Generate a PowerShell launcher for this listener

  • Copy and Replace the Base64 encoded Launcher Payload within the StarFighter JavaScript or VBScript file

For the JavaScript version use the following Variable:

  var EncodedPayload = "<Paste Encoded Launcher Payload Here>"

For the VBScript version use the following Variable:

  Dim EncodedPayload: EncodedPayload = "<Paste Encoded Launcher Payload Here>"
  • Then run: wscript.exe StarFighter.js or StarFighter.vbs on Target, or DoubleClick the launchers within Explorer.


ree

 
 
 

Comments


Drop Me a Line, Let Me Know What You Think

© 2035 by Train of Thoughts. Powered and secured by Thiru

bottom of page