trustedsec / unicorn

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.
https://www.trustedsec.com
Other
3.74k stars 817 forks source link

why your shellcode not involved ASLR #123

Closed xiaozhu1337 closed 5 years ago

xiaozhu1337 commented 5 years ago

https://github.com/Ekultek/BlueKeep/blob/master/bluekeep_poc.py said: Generating the payloads is hard, especially when alsr is involved with it.

but you just send a hexed powershell command.

Is this really possible?