search

trustedsec / unicorn

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.
https://www.trustedsec.com
Other
3.74k stars 817 forks source link

Powershell errors on execution #144

Closed ghost closed 4 years ago

ghost commented 4 years ago

Powershell seems to have issues reading the payload. I've tried to fix the issue but nothing works. Even decoding the payload seems to not work either. Unicorn version: 3.9 (latest) Windows OS: 10 (it's secure right ;) ) powershell_attack.txt powershell_errors.txt

HackingDave commented 4 years ago

Fixed the connection back issue, it should work now.

ghost commented 4 years ago

Works well! Gonna close it. Thanks @HackingDave !!