Skip to content

A repository of compiled and ready-to-use shells for Windows restricted environments.

License

Notifications You must be signed in to change notification settings

InfosecMatter/Shells-for-restricted-environments

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

18 Commits
 
 
 
 
 
 
 
 

Repository files navigation

Shells for restricted environments

https://www.infosecmatter.com/19-ways-to-bypass-software-restrictions-and-spawn-a-shell/

Minips

Minips is a custom minimalist PowerShell interpreter to bypass AppLocker restrictions, GPO or SRP restrictions preventing from running powershell.exe. There are 2 identical versions available:

minips.cs

Compile with csc.exe like this:

# Go to the latest .NET version folder, e.g.:
cd C:\Windows\Microsoft.NET\Framework64\v4.0.30319

# Compile:
csc.exe /unsafe /reference:"C:\path\to\System.Management.Automation.dll" /out:C:\users\public\minips.exe /platform:x64 "C:\path\to\minips.cs"

Then run the produced minips.exe executable to spawn the shell.

minips.xml

Simply start with msbuild.exe like this:

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\msbuild.exe c:\path\to\minips.xml

shell-pack.zip

Contains compiled and ready to use shells for bypassing AppLocker, GPO or SRP restrictions preventing from running Command Prompt (cmd.exe) or PowerShell interpreter (powershell.exe).

The pack contains the following shells:

The archive is password protected in order to evade antivirus detection.

More information including the password can be found here.

About

A repository of compiled and ready-to-use shells for Windows restricted environments.

Topics

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages