{"action":"created","issue":{"url":"https://api.github.com/repos/mdsecactivebreach/SharpShooter/issues/4","repository_url":"https://api.github.com/repos/mdsecactivebreach/SharpShooter","labels_url":"https://api.github.com/repos/mdsecactivebreach/SharpShooter/issues/4/labels{/name}","comments_url":"https://api.github.com/repos/mdsecactivebreach/SharpShooter/issues/4/comments","events_url":"https://api.github.com/repos/mdsecactivebreach/SharpShooter/issues/4/events","html_url":"https://github.com/mdsecactivebreach/SharpShooter/issues/4","id":303833127,"number":4,"title":"An app on your PC needs the following Windows feature","user":{"login":"3345623847","id":37214755,"avatar_url":"https://avatars2.githubusercontent.com/u/37214755?v=4","gravatar_id":"","url":"https://api.github.com/users/3345623847","html_url":"https://github.com/3345623847","followers_url":"https://api.github.com/users/3345623847/followers","following_url":"https://api.github.com/users/3345623847/following{/other_user}","gists_url":"https://api.github.com/users/3345623847/gists{/gist_id}","starred_url":"https://api.github.com/users/3345623847/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/3345623847/subscriptions","organizations_url":"https://api.github.com/users/3345623847/orgs","repos_url":"https://api.github.com/users/3345623847/repos","events_url":"https://api.github.com/users/3345623847/events{/privacy}","received_events_url":"https://api.github.com/users/3345623847/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-03-09T12:58:42Z","updated_at":"2018-03-09T14:50:40Z","closed_at":"2018-03-09T14:50:40Z","author_association":"NONE","body":"Did I miss something?\r\n\r\nCreate CobaltStrike (x32) payload like showed in the vimeo video\r\n```\r\n\r\npython SharpShooter.py --stageless --dotnetver 2 --payload vbs --output vbstest --rawscfile /root/payload32.bin --sandbox 3,4,5\r\n\r\n       _____ __                    _____ __                __\r\n      / ___// /_  ____ __________ / ___// /_  ____  ____  / /____  _____\r\n      \\__ \\/ __ \\/ __ `/ ___/ __ \\__ \\/ __ \\/ __ \\/ __ \\/ __/ _ \\/ ___/\r\n     ___/ / / / / /_/ / /  / /_/ /__/ / / / / /_/ / /_/ / /_/  __/ /\r\n    /____/_/ /_/\\__,_/_/  / .___/____/_/ /_/\\____/\\____/\\__/\\___/_/\r\n                         /_/\r\n\r\n     Dominic Chell, @domchell, MDSec ActiveBreach, v0.2\r\n\r\n[*] Avoiding sandbox artifacts\r\n[*] Avoiding bad MACs\r\n[*] Avoiding debugging\r\n[*] Written delivery payload to output/vbstest.vbs\r\n```\r\nExecute the VBS script Windows 7 (x64): Nothing\r\nExecute the VBS script Windows 10 (x64): An app on your PC needs the following Windows feature\r\n\r\n![img](https://i.imgur.com/Bj92dSC.png)\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/mdsecactivebreach/SharpShooter/issues/comments/371833796","html_url":"https://github.com/mdsecactivebreach/SharpShooter/issues/4#issuecomment-371833796","issue_url":"https://api.github.com/repos/mdsecactivebreach/SharpShooter/issues/4","id":371833796,"user":{"login":"dmchell","id":9010884,"avatar_url":"https://avatars3.githubusercontent.com/u/9010884?v=4","gravatar_id":"","url":"https://api.github.com/users/dmchell","html_url":"https://github.com/dmchell","followers_url":"https://api.github.com/users/dmchell/followers","following_url":"https://api.github.com/users/dmchell/following{/other_user}","gists_url":"https://api.github.com/users/dmchell/gists{/gist_id}","starred_url":"https://api.github.com/users/dmchell/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dmchell/subscriptions","organizations_url":"https://api.github.com/users/dmchell/orgs","repos_url":"https://api.github.com/users/dmchell/repos","events_url":"https://api.github.com/users/dmchell/events{/privacy}","received_events_url":"https://api.github.com/users/dmchell/received_events","type":"User","site_admin":false},"created_at":"2018-03-09T14:50:40Z","updated_at":"2018-03-09T14:50:40Z","author_association":"COLLABORATOR","body":"Your victim machine doesn't have the .NET framework installed - this is required."}}
{"actor":{"display_login":"dmchell"}}