Encodes a powershell script with XOR value to evade AV, then decodes the script and runs in memory.
Can import the script into memory on Cobalt Strike and run from there
-
Notifications
You must be signed in to change notification settings - Fork 0
coopmarshall/PS_encode-decode
Folders and files
| Name | Name | Last commit message | Last commit date | |
|---|---|---|---|---|
Repository files navigation
About
Encodes a powershell script with XOR value to evade AV, then decodes the script and runs in memory
Resources
Stars
Watchers
Forks
Releases
No releases published
Packages 0
No packages published