Interesting, I am looking forward to testing this out. Thanks for the upload.

ya i have used this some days ago and one more advantage is that antivirus is also not detecting it as virus.

It is like having an embeded batch source code which is copied to %tmp% and then executed?

i think so
how else would it work ?

not looked at the tool,
can it dump files with the batch script ? (would be usefull if your script uses external files)

Don't think so.

i think so
how else would it work ?

Would be easiest/reliable method, but not the only one.

You could pipe everything to cmd.exe, although would need to be written in command prompt style, not batch:

C:\>TYPE test.bat
@ECHO OFF
FOR /F "tokens=*" %%i IN (test.bat) DO ECHO.-- %%i

C:\>test.bat
-- @ECHO OFF
-- FOR /F "tokens=*" %%i IN (test.bat) DO ECHO.-- %%i

C:\>TYPE test.bat | CMD /K
C:\>@ECHO OFF
FOR /F "tokens=*" %%i IN (test.bat) DO ECHO.-- %%i

C:\>:: doesn't work, edit
C:\>TYPE test.bat
@ECHO OFF
FOR /F "tokens=*" %i IN (test.bat) DO ECHO.-- %i

C:\>test.bat
i was unexpected at this time.

C:\>TYPE test.bat | CMD /K
C:\>@ECHO OFF
FOR /F "tokens=*" %i IN (test.bat) DO ECHO.-- %i
-- @ECHO OFF
-- FOR /F "tokens=*" %i IN (test.bat) DO ECHO.-- %i

Although labels would become tricky, especially use of :EOF. 20 lines of C code could do this.

You could also turn each newline into an & then run it:

C:\>CMD /C @ECHO OFF&FOR /F "tokens=*" %i IN (test.bat) DO ECHO.-- %i
C:\>ECHO.-- @ECHO OFF
-- @ECHO OFF
C:\>ECHO.-- FOR /F "tokens=*" %i IN (test.bat) DO ECHO.-- %i
-- FOR /F "tokens=*" %i IN (test.bat) DO ECHO.-- %i

Although a simple rem, label, etc.. would break it. Probably many more methods to do this.

Note about piping, that DEFCON video & powershell:

PS C:\> '"HAI"' > my_script.ps1
PS C:\> . .\my_script.ps1
File C:\my_script.ps1 cannot be loaded because the execution of scripts is disabled on this system. Please see "get-hel
p about_signing" for more details.
At line:1 char:2
+ . <<<<  .\my_script.ps1
    + CategoryInfo          : NotSpecified: (:) [], PSSecurityException
    + FullyQualifiedErrorId : RuntimeException

--- from cmd prompt ---
C:\>echo Set-ExecutionPolicy UnRestricted | powershell -NonInteractive -NoProfile -C "$input | % { Invoke-Expression $_ }"

--- back to powershell ---
PS C:\> . .\my_script.ps1
HAI

--- back to cmd prompt ---
C:\>powershell -NonInteractive -NoProfile -C ". .\my_script.ps1"
HAI

That seems kinda fucked up.. and makes "Set-ExecutionPolicy" pointless, if not then << $input | % { Invoke-Expression $_ } >> can eval most things.
 
batch just got hella powerful on win7, 08r2

It hink another option would be this http://msdn.microsoft.com/en-us/library/windows/desktop/ms682499%28v=vs.85%29.aspx opening cmd.exe

Oh, while posting Kulverstukas posted.
That would be hard. We would have to write a "batch parser" and then generate asm code. Because what you said aboout converting it to another language would require that language's compiler to compile it. Nah, I was thinking in the "in-victim's-machine-pc" exe generation way. What you said is OK.

@ca0s: what I meant by piping/20 lines of C. He went over that but I always condense as much as possible, maybe 40 lines is more realistic.

@kulv: In sorta relation, not compile but if you were to port/modify the cmd.exe interpreter from the WINE project to windows(that's a weird thought) you may be able to make an exe with it's own built-in batch interpreter(maybe).

@bubz: was interesting, ran on kinda long so only watched about half. I always assumed if they put in a feature like that into powershell, it would actually require some work to bypass.