search

trustedsec / unicorn

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.
https://www.trustedsec.com
Other
3.74k stars 817 forks source link

64-bit support #86

Closed Snowman418 closed 6 years ago

Snowman418 commented 6 years ago

Can you add support for 64bit payloads? I understand that the script is backwards compatible and uses the powershell in the syswow folder, but some exploits using powershell require a 64bit version of powershell to be running (i.e. DLL injection).

trustedsec commented 6 years ago

Sorry - no can do. It’s limited to 8190 chars - payload would be too large.