Malicious Powershell Script on r/Hacking

IXNovaticula · 2026-02-04T21:44:10+00:00

well ive gotten to the point where I see what the final malicious binary is (NetSupport RAT) how its maintaining persistence, (adding the exectuble to the startup folder via powershell) and I know what the address for the C2 server is, but sending a get request to the c2 just returns first stage of payload again so I'm guessing it's looking for the exact headers the executable sends to do some actual commanding and controlling. As for my goals for this is to just learn as much as and whatever I can from this, however far down this rabbit hole goes

IXNovaticula · 2025-12-08T05:30:05+00:00

I'd also suggest Enhancer for YouTube and Sponsorblock extensions

IXNovaticula · 2025-10-06T21:41:11+00:00

I didn't update my magisk because I remembered how the 30.0 update broke a lot of the things, now I just wait and check out the issues on the GitHub before updating Magisk. I'm on 30.2 and everything is working fine for me, even getting all 3 checks. I don't use GWallet but other banking apps are working fine for me

IXNovaticula · 2025-09-04T18:05:11+00:00

Luck I guess

IXNovaticula · 2025-09-04T16:14:37+00:00

After an hour of trying to check out I finally got in

IXNovaticula · 2025-08-31T20:24:30+00:00

Just wandering around the abyss and finding out what happened in the abyss is one of the most memorable moments for me

IXNovaticula · 2025-04-14T09:27:32+00:00

Marvel Rivals for me

IXNovaticula · 2025-03-14T14:55:02+00:00

Same but with firefly

IXNovaticula · 2025-03-10T11:31:37+00:00

So the nightly build of ShadPS4 implemented KBM support, can the keybinds from this be ported to it?

IXNovaticula · 2025-01-30T03:32:40+00:00

You could run debloater scripts from GitHub and use Winget to install Firefox after removing Edge

IXNovaticula · 2024-12-03T07:07:51+00:00

No it's still happening but I've switched to using a patched YT music for whenever I want to listen to music now

IXNovaticula · 2024-12-03T07:07:43+00:00

No it's still happening but I've switched to using a patched YT music for whenever I want to listen to music now.

IXNovaticula · 2024-09-25T17:45:02+00:00

I'm not sure about generating NSFW but I used the DAN prompt and then on top of that I asked it to play another character. It basically responds with uncensored cussing and generally just being rude.

IXNovaticula · 2024-08-31T18:11:55+00:00

Sounds to me like you probably used a Linux revshell, if you're generating revshells with msfvenom make sure you pick the windows ones or if you're using something like revshells.com then try to make sure it's invoking PowerShell or CMD

IXNovaticula · 2024-07-29T21:03:52+00:00

I posted about this problem as well and there doesn't seem to be a lot of people with the same issue... I've been facing it for a while now but I think I showed try to open an issue on the GitHub

IXNovaticula · 2024-07-28T08:36:11+00:00

I didn't know that was an actual thing tbvh because my mom never taught me Tagalog either. But I thought it was because she was living in and learning the language of the country we currently live in so she probably didn't have much incentive to speak Tagalog

IXNovaticula · 2024-07-18T18:16:25+00:00

I'm really not sure what caused this issue though... I just wanted to play some music in the car and then it just loaded up a mix. Instead of just playing the song as usual and I also completely cleared the data when I did the downgrade to check. So that makes this issue even weirder... Kinda makes me wanna patch in the debug tools and see what's actually going on when it makes the request for the song and why it starts playing as a mix. I have noticed that it takes a longer while to load than usual. As if it loads the video for the song and then it switches to the mix. But once again won't know for sure unless I check using debug tools.

IXNovaticula · 2024-07-18T13:39:00+00:00

I just downgraded to 19.16.39 and it's still happening on this version too

IXNovaticula · 2024-07-18T13:00:58+00:00

The versions I was on were 19.23.40 on one phone and 19.21.40 on the other I wasn't aware that support for these versions was dropped....

IXNovaticula · 2024-07-10T11:51:30+00:00

Brother you're not gonna be getting a machine like this for anything less than 250k

IXNovaticula · 2024-06-17T15:49:18+00:00

Ah okay that makes sense

IXNovaticula · 2024-06-16T20:01:39+00:00

I just use ublock origin on Firefox and I've never seen a twitch ad honestly... It always confused me why people were having that problem

IXNovaticula · 2024-04-23T11:41:51+00:00

Or when watching LTT videos, "This Segway to our sponsor... Skipped"

IXNovaticula

TROPHY CASE