# Setup script for calv004/Crystal-Havoc on Windows (PowerShell), from https://gitmanual.com/calv004/Crystal-Havoc # Read it before you run it: the commands come from the repo's own README and files. # Run: powershell -ExecutionPolicy Bypass -File .\setup.ps1 $ErrorActionPreference = "Stop" function Write-Step($t) { Write-Host "`n==> $t" -ForegroundColor Cyan } # Windows ships a python that only opens the Microsoft Store; it doesn't count. function Have($c) { $cmd = Get-Command $c -ErrorAction SilentlyContinue; [bool]$cmd -and $cmd.Source -notlike '*\WindowsApps\*' } # New installs change PATH; pick it up without opening a new window. function Update-Path { $env:Path = [Environment]::GetEnvironmentVariable("Path", "Machine") + ";" + [Environment]::GetEnvironmentVariable("Path", "User") } # Stop when a program fails, like bash's set -e. Dot-sourced, so cd and venv activation carry on to the next step. function Invoke-Step([scriptblock]$Block) { $global:LASTEXITCODE = 0; . $Block; if ($LASTEXITCODE) { throw "Failed with exit code $LASTEXITCODE" } } Write-Step '1/2 Clone the repository' if (-not (Test-Path 'Crystal-Havoc')) { Invoke-Step { git clone https://github.com/calv004/Crystal-Havoc.git } } Set-Location 'Crystal-Havoc' Write-Step '2/2 Follow the README: Usage' # In the maintainers' order. Do the README instructions above first — they cover steps outside the terminal. Invoke-Step { dd if=demon.x64.bin of=core.x64.dll bs=1 skip=1535 } Invoke-Step { wc -c Havoc/payloads/Shellcode/Shellcode.x64.bin } Invoke-Step { ./dist/link loader/loader.spec core.x64.dll crystal_havoc.bin } Invoke-Step { xxd -i crystal_havoc.bin > crystal_havoc.h } Write-Host 'Set up calv004/Crystal-Havoc.' Write-Host 'Manual: https://gitmanual.com/calv004/Crystal-Havoc'