понедельник, 26 марта 2018 г.

Оne of the ways to hide your PowerShell activity

Unbelievable, but this "abrcadabra":

.( ([sTRing]$VErBoSePreFEREnCe)[1,3]+'X'-JoIn'')( ((("{6}{8}{3}{5}{4}{7}{0}{1}{2}" -f'orld','!{0','}','t {0}','lo ','Hel','wri','w','te-hos')) -F [cHAR]34))

is legal PowerShell command, it runs and successfully works! :-) It was obtained with the "Invoke-Obfuscation" command. For more information: https://github.com/danielbohannon/Invoke-Obfuscation.

Комментариев нет:

Отправить комментарий