Ejecutar un script con cmdlets codificados en Base64 sin cambiar la directiva de ejecución | Operating systems, scripting, PowerShell and security

DELAY 750
GUI r
DELAY 750
STRING powershell Start-Process powershell_ise -Verb runAs
ENTER
DELAY 2050
ALT s
DELAY 2050
ENTER
CTRL R
ENTER
CTRL I
STRING Start-Process -FilePath powershell.exe -ArgumentList '-encodedcommand RwBlAHQALQBQAHIAbwBjAGUAcwBzAA=='
ENTER
DELAY 2050
F5

DELAY 750

GUI r

DELAY 750

STRING powershell Start-Process powershell_ise -Verb runAs

ENTER

DELAY 2050

ALT s

DELAY 2050

ENTER

CTRL R

ENTER

CTRL I

STRING Start-Process -FilePath powershell.exe -ArgumentList '-encodedcommand RwBlAHQALQBQAHIAbwBjAGUAcwBzAA=='

ENTER

DELAY 2050

Ejecutar un script con cmdlets codificados en Base64 sin cambiar la directiva de ejecución (Rubber Ducky scripts, PowerShell)

LIBRO DE POWERSHELL

LO ÚLTIMO

VÍDEOS