search

cobbr / PSAmsi

PSAmsi is a tool for auditing and defeating AMSI signatures.
GNU General Public License v3.0
387 stars 71 forks source link

StackOverflowException in Get-MinimallyObfuscated #3

Closed magnusstubman closed 5 years ago

magnusstubman commented 5 years ago

Title says it all. https://pastebin.com/raw/NYHCfeQ4 is just a copy of https://raw.githubusercontent.com/PowerShellMafia/PowerSploit/master/Exfiltration/Invoke-Mimikatz.ps1

Screenshot:

screen shot 2018-10-26 at 11 10 31
magnusstubman commented 5 years ago

(test system is the win10 x64 vm on vmware fusion from https://developer.microsoft.com/en-us/microsoft-edge/tools/vms/ (fully updated since yesterday)

magnusstubman commented 5 years ago

Ignore the above, apparently pastebin has a length restriction, so I hadn't copied everything. I still can't get the obfuscation to work with mimikatz, but that's another issue.