Framework | Scripting and security

Crear un proyecto en Visual C# Biblioteca de Clase (.NET Framework) Importar desde Microsoft Visual C# la referencia al ensamblado System.Management.Automation (C:\Windows\assembly\GAC_MSIL\System.Management.Automation\1.0.0.0__31bf3856ad364e35\System.Management.Automation.dll) Añadir el siguiente código en PowerShell a Visual Studio C# y compilar la solución

using System;
using System.Management.Automation;  // Windows PowerShell namespace.
 
namespace PowerSh
{
    public class PowerSh
    {
        public static void CrearUsuario()
        {

            //Create a PowerShell object.
            PowerShell ps = PowerShell.Create();

            //New-LocalUser usuario -Password (ConvertTo-SecureString "11234aaadsf" -asplaintext -force)
            ps.AddScript("New-LocalUser usuario -Password (ConvertTo-SecureString '11234aaadsf' -asplaintext -force)");

            IAsyncResult result = ps.BeginInvoke();

            // do something else until execution has completed.
            // this could be sleep/wait, or perhaps some other work
            while (result.IsCompleted == false)
            {
            }

        } // End Main.
    } // End HostPs1.
}

using System;

using System.Management.Automation; // Windows PowerShell namespace.

namespace PowerSh

{

public class PowerSh

{

public static void CrearUsuario()

{

//Create a PowerShell object.

PowerShell ps = PowerShell.Create();

//New-LocalUser usuario -Password (ConvertTo-SecureString "11234aaadsf" -asplaintext -force)

ps.AddScript("New-LocalUser usuario -Password (ConvertTo-SecureString '11234aaadsf' -asplaintext -force)");

IAsyncResult result = ps.BeginInvoke();

// do something else until execution has completed.

// this could be sleep/wait, or perhaps some other work

while (result.IsCompleted == false)

{

}

} // End Main.

} // End HostPs1.

}

La dll compilada se encuentra en la carpeta bin Llamar a la dll creada desde PowerShell

[Reflection.Assembly]::LoadFile("C:\Users\juan\source\repos\ClassLibrary1\ClassLibrary1\bin\Debug\ClassLibrary1.dll")
[PowerSh.PowerSh]::CrearUsuario()

1 2	[Reflection.Assembly]::LoadFile("C:\Users\juan\source\repos\ClassLibrary1\ClassLibrary1\bin\Debug\ClassLibrary1.dll") [PowerSh.PowerSh]::CrearUsuario()

C# PowerShell

Crear, compilar y ejecutar una DLL con Microsoft Visual C# que abre Notepad desde PowerShell

28/11/201824/11/2018

using System.Management.Automation;  // Windows PowerShell namespace.

namespace PowerSh
{
    public class PowerSh
    {
        public static void AbrirNotepad()
        {

            //Create a PowerShell object.
            PowerShell ps = PowerShell.Create();
            //Add the command that you want to execute.
            ps.AddCommand("Start-Process");
            //Add the argument
            ps.AddArgument("notepad");
            //Invoke the command.
            ps.Invoke();

        } // End Main.
    } // End HostPs1.
}

using System.Management.Automation; // Windows PowerShell namespace.

namespace PowerSh

{

public class PowerSh

{

public static void AbrirNotepad()

{

//Create a PowerShell object.

PowerShell ps = PowerShell.Create();

//Add the command that you want to execute.

ps.AddCommand("Start-Process");

//Add the argument

ps.AddArgument("notepad");

//Invoke the command.

ps.Invoke();

} // End Main.

} // End HostPs1.

}

La dll compilada se encuentra en la carpeta bin Llamar a la dll creada desde PowerShell

C# PowerShell

Crear, compilar y ejecutar una DLL con Microsoft Visual C# que ejecute un cmdlet de PowerShell

26/11/201824/11/2018

Crear un proyecto en Visual C# Biblioteca de Clase (.NET Framework) Buscar e instalar en NuGet System.Management.Automation Importar desde Microsoft Visual C# la referencia al ensamblado System.Management.Automation (C:\Windows\assembly\GAC_MSIL\System.Management.Automation\1.0.0.0__31bf3856ad364e35\System.Management.Automation.dll) Añadir el siguiente código en PowerShell a Visual Studio C# y compilar la solución

using System;
using System.Management.Automation;  // Windows PowerShell namespace.

namespace PowerSh
{
    public class PowerSh
    {
        public static void Main()
        {

            //Create a PowerShell object.
            PowerShell ps = PowerShell.Create();
            //Add the command that you want to execute.
            ps.AddCommand("Get-Process");
            //Add the command that you want to execute.
            ps.AddCommand("out-file");
            //Add the argument
            ps.AddArgument("out.txt");
            //Invoke the command.
            ps.Invoke();

        } // End Main.
    } // End HostPs1.
}

using System;

using System.Management.Automation; // Windows PowerShell namespace.

namespace PowerSh

{

public class PowerSh

{

public static void Main()

{

//Create a PowerShell object.

PowerShell ps = PowerShell.Create();

//Add the command that you want to execute.

ps.AddCommand("Get-Process");

//Add the command that you want to execute.

ps.AddCommand("out-file");

//Add the argument

ps.AddArgument("out.txt");

//Invoke the command.

ps.Invoke();

} // End Main.

} // End HostPs1.

}

La dll compilada se encuentra en la carpeta bin Llamar a la dll creada desde PowerShell

PowerShell

Obtener información sobre un método .NET Framework

15/02/201805/01/2018

[Math].GetMembers() | Select-Object Name

1	[Math].GetMembers() \| Select-Object Name

PowerShell

Convert XML to JSON (PowerShell)

11/02/201810/02/2018

# Download Json.NET
# Popular high-performance JSON framework for .NET
# https://www.newtonsoft.com/json

# Adds a Microsoft .NET Framework type (a class) to a Windows PowerShell session
Add-Type -Path C:\Users\juan\Desktop\Automatizacion\Windows\packages\Newtonsoft.Json.9.0.1\lib\net45\Newtonsoft.Json.dll

[XML]$members = '<?xml version="1.0"?>
<members>
	<member id="1">
		<user>juanito</user>
		<group>ventas</group>
	</member>
	<member id="2">
		<user>luis</user>
		<group>ventas</group>
	</member>
</members>'

$json = [Newtonsoft.Json.JsonConvert]::SerializeXmlNode($members) | ConvertFrom-Json

$json.members.member | %{
    $_.user
    $_.group
}

# Download Json.NET

# Popular high-performance JSON framework for .NET

# https://www.newtonsoft.com/json

# Adds a Microsoft .NET Framework type (a class) to a Windows PowerShell session

Add-Type -Path C:\Users\juan\Desktop\Automatizacion\Windows\packages\Newtonsoft.Json.9.0.1\lib\net45\Newtonsoft.Json.dll

[XML]$members = '<?xml version="1.0"?>

<user>juanito</user>

<group>ventas</group>

</member>

<group>ventas</group>

</member>

</members>'

$json = [Newtonsoft.Json.JsonConvert]::SerializeXmlNode($members) | ConvertFrom-Json

$json.members.member | %{

$_.user

$_.group

}

Automation Python

Install PyAutoGUI

10/11/201705/01/2018

On Windows, this is:

C:\Python34\pip.exe install pyautogui

1	C:\Python34\pip.exe install pyautogui

(Though you may have a different version of Python installed other than 3.4) On OS X, this is:

pip3 install pyobjc-framework-Quartz
pip3 install pyobjc-core
pip3 install pyobjc
pip3 install pyautogui

pip3 install pyobjc-framework-Quartz

pip3 install pyobjc-core

pip3 install pyobjc

pip3 install pyautogui

If you are running El Capitan and have problems installing pyobjc try:

MACOSX_DEPLOYMENT_TARGET=10.11 pip install pyobjc

1	MACOSX_DEPLOYMENT_TARGET=10.11 pip install pyobjc

On Linux, this is:

pip3 install python3-xlib
sudo apt-get install scrot
sudo apt-get install python3-tk
sudo apt-get install python3-dev
pip3 install pyautogui

pip3 install python3-xlib

sudo apt-get install scrot

sudo apt-get install python3-tk

sudo apt-get install python3-dev

pip3 install pyautogui

Operating Systems

osquery

17/10/201728/01/2018

osquery is an operating system instrumentation framework for OS X/macOS, Windows, and Linux. The tools make low-level operating system analytics and monitoring both performant and intuitive. What is osquery? osquery exposes an operating system as a high-performance relational database. This allows you to write SQL-based queries to explore operating system data. With osquery, SQL tables represent abstract concepts such as running processes, loaded kernel modules, open network connections, browser plugins, hardware events or file hashes. SQL tables are implemented via a simple plugin and extensions API. A variety of tables already exist and more are being written: https://osquery.io/tables. To best understand the […]

PowerShell

Agregar un tipo de Microsoft .NET Framework (una clase) a una sesión de Windows PowerShell

01/09/201728/08/2017

$CodigoC2 = @”

using System;

public class Clase
{
public static void Main()
{
Console.WriteLine("Ejemplo función agregada");
}
}

“@

Add-Type -TypeDefinition $CodigoC2 -ErrorAction SilentlyContinue

[Clase]::Main()

$CodigoC2 = @”

using System;

public class Clase

{

public static void Main()

{

Console.WriteLine("Ejemplo función agregada");

}

“@

Add-Type -TypeDefinition $CodigoC2 -ErrorAction SilentlyContinue

[Clase]::Main()

PowerShell

1. Introducción a PowerShell (nivel intermedio)

01/07/201721/04/2019

Desde el año 2006 Microsoft dispone de una línea de comandos mejorada que se denomina PowerShell (aunque los orígenes de PowerShell datan de años anteriores y el nombre del proyecto se conocía como MONAD), es más potente y rica que la consola de MS-DOS. PowerShell es una línea de comandos con tecnología de scripting basada en tareas que proporciona a los administradores de tecnologías de la información (TI) un control integral y la posibilidad de automatizar las tareas de administración del sistema. PowerShell se ha creado sobre .NET Framework, Common Language Runtime (CLR) y .NET Framework, y acepta y devuelve […]

Bunny scripts

Pasos para configurar Bash Bunny en español

09/03/201702/09/2017

Configuración inicial Descargar los últimos payloads desde GitHub https://github.com/hak5/bashbunny-payloads Conectar Bash Bunny en modo Arming Mode (“Switch Position 3: Arming Mode) y copiar el contenido de GitHub en Bash Bunny. Welcome & Updating the Bash Bunny Software —————————————————————————– Congratulations on your new Bash Bunny by Hak5! For the best experience, we recommend updating to the latest framework version and payload set from the downloads section of https://www.bashbunny.com. There you will find a wealth of knowledge and a helpful community of creative penetration testers and IT professionals. Welcome! Instalar “Tools Installer for Bash Bunny” Conectar Bash Bunny en modo Arming Mode […]

Older Posts