没有.exe 程序？ 怎么运行.exe？

大致原理

将.exe二进制文件转为base64，再把base64转为机器码，调用Invoke-ReflectivePEInjection写入到内存并运行，实现无exe文件执行exe

单运行.exe 效果

该.exe 为64位

powershell-base64-exe.png

加载到内存效果图

Win7 系统测试成功
powershell-exe.png

大致流程

把.exe二进制文件转为base64，再把base64转为机器码，调用Invoke-ReflectivePEInjection写入到内存并运行，实现无exe文件执行exe

Invoke-ReflectivePEInjection为PowerSpolit渗透框架下模块一部分

项目地址：>>点击跳转

代码例子

  1. 编程语言：Powershell
  2. 测试系统：Windows-7 64位

function Invoke-ReflectivePEInjection 
{
#这里放 Invoke-ReflectivePEInjection 代码
#代码有两千多行，这里节省空间，就不放了
#去项目地址复制 Invoke-ReflectivePEInjection 代码
}

#转base64
function Convert-BinaryToString {
   [CmdletBinding()] param (
      [string] $FilePath
   )
   try {
      $ByteArray = [System.IO.File]::ReadAllBytes($FilePath);
   }
   catch {
      throw "Failed to read file. Ensure that you have permission to the file, and that the file path is correct.";
   }
   if ($ByteArray) {
      $Base64String = [System.Convert]::ToBase64String($ByteArray);
   }
   else {
      throw '$ByteArray is $null.';
   }
   Write-Output -InputObject $Base64String;
}

$base64 = Convert-BinaryToString ".\test.exe"
#方便测试这里直接调用本地.exe转为base64
# 上面一行读取同目录下test.exe程序，转为base64

#####注释
$base64 = "这里放二进制base64"
#如果不想调用本地.exe
#这里直接设置二进制.exe  base64代码
#####注释

$PEBytes = [System.Convert]::FromBase64String($base64)
#加载二进制$base64

Invoke-ReflectivePEInjection -PEBytes $PEBytes -ExeArgs "Arg1 Arg2 Arg3 Arg4"
#$PEBytes转为机器码，调用Invoke-ReflectivePEInjection执行
#实现无.exe 文件执行

测试.exe

# 方便测试这里贴上二进制.exe 得base64
# 该.exe 编译时为64位

$base64 = "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"

可能报错

PE platform doesn’t match the architecture of the process it is being loaded in (32/64bit)
使用32 位powershell

powershell-32bit.png

最后修改：2021 年 07 月 28 日
© 允许规范转载
如果觉得我的文章对你有用，请随意赞赏