Jump to content

nobbythenoob

Members
  • Posts

    2
  • Joined

  • Last visited

Everything posted by nobbythenoob

  1. Go to : AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ Delete the vbs script. Delete c:\temp\ncat.exe Kill the ncat process if it is still running.
  2. Most likely Windows Defender. When I ran the bashbunny with this payload, it worked the first time, and then after that Windows defender did not like it. But that is trivial to get around, just rename some fields and file names and it works fine.
×
×
  • Create New...