{"id":5219,"date":"2019-09-23T13:59:19","date_gmt":"2019-09-23T05:59:19","guid":{"rendered":"https:\/\/www.darknet.org.uk\/?p=5219"},"modified":"2019-09-23T13:59:34","modified_gmt":"2019-09-23T05:59:34","slug":"exe2powershell-convert-exe-to-bat-files","status":"publish","type":"post","link":"https:\/\/www.darknet.org.uk\/2019\/09\/exe2powershell-convert-exe-to-bat-files\/","title":{"rendered":"exe2powershell &#8211; Convert EXE to BAT Files"},"content":{"rendered":"<p>exe2powershell is used to convert EXE to BAT files, the previously well known tool for this was exe2bat, this is a version for modern Windows.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.darknet.org.uk\/wp-content\/uploads\/2019\/09\/exe2powershell-Convert-EXE-to-BAT-Files-640x315.png\" alt=\"exe2powershell - Convert EXE to BAT Files\" width=\"640\" height=\"315\" class=\"aligncenter size-medium wp-image-5302\" srcset=\"https:\/\/www.darknet.org.uk\/wp-content\/uploads\/2019\/09\/exe2powershell-Convert-EXE-to-BAT-Files-640x315.png 640w, https:\/\/www.darknet.org.uk\/wp-content\/uploads\/2019\/09\/exe2powershell-Convert-EXE-to-BAT-Files.png 906w\" sizes=\"(max-width: 640px) 100vw, 640px\" \/><\/p>\n<script async src=\"https:\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-3033787195489589\"\r\n     crossorigin=\"anonymous\"><\/script>\r\n<!-- Darknet Responsive Post Ad Links [previously link ad unit] -->\r\n<ins class=\"adsbygoogle\"\r\n     style=\"display:block\"\r\n     data-ad-client=\"ca-pub-3033787195489589\"\r\n     data-ad-slot=\"5456620019\"\r\n     data-ad-format=\"auto\"><\/ins>\r\n<script>\r\n     (adsbygoogle = window.adsbygoogle || []).push({});\r\n<\/script>\n<p>This will convert any binary file (*.exe) to a BAT file, the resulting BAT file contains only <code>echo<\/code> commands followed by a PowerShell command to re-create the original binary file.<\/p>\n<p>This kind of tool can be useful during a pen-test when you want to trigger a shell without any upload feature. With <code>echo<\/code> and PowerShell the auditor is able to upload any binary file to the target system.<\/p>\n<p>This version is modernized from exe2bat to work with current Windows versions as exe2bat had some limitations:<\/p>\n<ul>\n<li>Needs <code>debug.exe<\/code> available on the target computer (16-bit application which was removed in Windows 7 x64 but available in Windows 7 x86)<\/li>\n<li>Limits input exe size to 64kB<\/li>\n<\/ul>\n<p>exe2powershell replaces the need of <code>debug.exe<\/code> by using a PowerShell command line which is available on all Windows since Windows 7 \/ 2008 and there is no more limitation in input exe size.<\/p>\n<h2>Usage of exe2powershell to Convert EXE to BAT Files<\/h2>\n<pre>C:\\exe2powershell\\bin>exe2powershell.exe\r\n  ______          ___  _____                       _____ _          _ _\r\n |  ____|        |__ \\|  __ \\                     \/ ____| |        | | |\r\n | |__  __  _____   ) | |__) |____      _____ _ _| (___ | |__   ___| | |\r\n |  __| \\ \\\/ \/ _ \\ \/ \/|  ___\/ _ \\ \\ \/\\ \/ \/ _ \\ '__\\___ \\| '_ \\ \/ _ \\ | |\r\n | |____ >  <  __\/\/ \/_| |  | (_) \\ V  V \/  __\/ |  ____) | | | |  __\/ | |\r\n |______\/_\/\\_\\___|____|_|   \\___\/ \\_\/\\_\/ \\___|_| |_____\/|_| |_|\\___|_|_|\r\n\r\n        [ exe2bat reborn in exe2powershell for modern Windows ]\r\n [ initial author ninar1, based on riftor work, and modernized by ycam ]\r\n [ exe2powershell version 1.0 - keep up2date: asafety.fr \/ synetis.com ]\r\n\r\n [*] Usage : exe2powershell.exe inputfile outputfile\r\n [*] e.g.  : exe2powershell.exe nc.exe nc.bat<\/pre>\n<p>You can download exe2powershell here:<\/p>\n<p><a href=\"https:\/\/github.com\/yanncam\/exe2powershell\/archive\/master.zip\">exe2powershell-master.zip<\/a><\/p>\n<p>Or read more <a href=\"https:\/\/github.com\/yanncam\/exe2powershell\">here<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>exe2powershell is used to convert EXE to BAT files, the previously well known tool for this was exe2bat, this is a version for modern Windows. This will convert any binary file (*.exe) to a BAT file, the resulting BAT file contains only echo commands followed by a PowerShell command to re-create the original binary file. [&hellip;]<\/p>\n","protected":false},"author":25,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_seopress_robots_primary_cat":"none","_seopress_titles_title":"exe2powershell - Convert EXE to BAT Files","_seopress_titles_desc":"exe2powershell is used to convert EXE to BAT files, the previously well known tool for this was exe2bat, this is a version for modern Windows.","_seopress_robots_index":"","_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"categories":[4],"tags":[2129],"featured_image_src":null,"featured_image_src_square":null,"author_info":{"display_name":"Darknet","author_link":"https:\/\/www.darknet.org.uk\/author\/darknet\/"},"_links":{"self":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/5219"}],"collection":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/comments?post=5219"}],"version-history":[{"count":0,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/5219\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/media?parent=5219"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/categories?post=5219"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/tags?post=5219"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}