{"action":"opened","issue":{"url":"https://api.github.com/repos/Veil-Framework/Veil-Evasion/issues/408","repository_url":"https://api.github.com/repos/Veil-Framework/Veil-Evasion","labels_url":"https://api.github.com/repos/Veil-Framework/Veil-Evasion/issues/408/labels{/name}","comments_url":"https://api.github.com/repos/Veil-Framework/Veil-Evasion/issues/408/comments","events_url":"https://api.github.com/repos/Veil-Framework/Veil-Evasion/issues/408/events","html_url":"https://github.com/Veil-Framework/Veil-Evasion/issues/408","id":188021650,"number":408,"title":"CS rev_https .net proxy code inclusion","user":{"login":"ghostop14","id":12989717,"avatar_url":"https://avatars.githubusercontent.com/u/12989717?v=3","gravatar_id":"","url":"https://api.github.com/users/ghostop14","html_url":"https://github.com/ghostop14","followers_url":"https://api.github.com/users/ghostop14/followers","following_url":"https://api.github.com/users/ghostop14/following{/other_user}","gists_url":"https://api.github.com/users/ghostop14/gists{/gist_id}","starred_url":"https://api.github.com/users/ghostop14/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ghostop14/subscriptions","organizations_url":"https://api.github.com/users/ghostop14/orgs","repos_url":"https://api.github.com/users/ghostop14/repos","events_url":"https://api.github.com/users/ghostop14/events{/privacy}","received_events_url":"https://api.github.com/users/ghostop14/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2016-11-08T15:28:41Z","updated_at":"2016-11-08T15:28:41Z","closed_at":null,"body":"## Veil-Evasion version\r\nLatest Kali rolling\r\n\r\n## OS Used - all info (architecture, linux flavor, etc)\r\nLatest Kali rolling\r\n\r\nI had an instance to need my stager to be able to pull the DLL down through a proxy server.  I had to make 2 changes.  The first was changing the community string in rev_https.cs from the older detectable Mozilla/4.0 to a current IE user agent string like \"Mozilla/5.0 (Windows NT 6.3; Trident/7.0; rv:11.0) like Gecko\".  The other was adding the .Net proxy code prior to the DownloadData call in rev_https.cs too (see code below that did the trick).  Could this be included in the general repo?\r\n\r\n        payloadCode += \"IWebProxy wp = WebRequest.DefaultWebProxy;\\n\"\r\n        payloadCode += \"wp.Credentials = CredentialCache.DefaultCredentials;\\n\"\r\n        payloadCode += \"%s.Proxy = wp;\\n\" %(webClientName)\r\n\r\nThanks!\r\n"}}
{"actor":{"display_login":"ghostop14"}}