trustedsec/unicorn
Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.
PythonNOASSERTION
Issues
- 0
SyntaxWarning with Python 3.12
#177 opened by elboulangero - 1
stuck at generating payload
#166 opened by vAdrian2424 - 1
- 1
No meterpreter being caught by handler
#169 opened by danrneal - 0
Powershell ERROR
#172 opened by juansonnn - 0
t
#176 opened by c0tek1ty31ydk - 1
Do unicorn work with android payloads like android/meterpreter/reverse_tcp and if it do then how?
#161 opened by hamzah-sajid-code - 2
i have a problem with unicorn Also ensure your syntax for unicorn is correct. Missing IP address,
#162 opened by ZoOoOoOoOoOom - 6
can not exec union.py
#125 opened by leezp - 2
Macro compatibility
#158 opened - 1
Windows/download_exec
#148 opened by mamria33 - 0
Macro reverse_https is detected by Windows Defender. Is there a workaround for this?
#157 opened by TheDumbCatto - 3
Logical Error in Help Section
#156 opened by b0rne-ug - 0
no more bypassing defender
#155 opened by LukeProducts - 7
the powershell script is detectable.
#154 opened by zisis912 - 0
- 0
Can`t skip UC_ERR_READ_UNMAPPED
#150 opened by StarrySai - 0
meterpreter cannot use established connection
#142 opened by Kofl - 18
- 3
Meterpreter Session URI unescape is obsolete
#141 opened by fs0c1ety-sec - 2
I am having issues getting my callbacks
#146 opened by DorjM - 1
Formatting troubles with Word/Excel VBA editor
#147 opened by 07am - 7
powershell_attack.txt doesn't work on windows10
#115 opened by Zaghw - 1
- 2
Powershell errors on execution
#144 opened - 1
is it possible to execute custom payload created through proper coding can be injected through unicorn.
#145 opened by GuardianByte - 1
Random quotes escape \" does not work in powershell
#139 opened by zvaratom - 1
'str' object has no attribute 'decode'
#138 opened by arykiller - 2
Method invocation failed because [System.RuntimeType] does not contain a method named 'replace'
#136 opened by sogewasp - 2
All shells caught fail to load stdapi
#132 opened by BustedSec - 1
- 0
Installing issue
#133 opened by haziqtanveer - 2
meterpreter > load stdapi Loading extension stdapi... [-] Failed to load extension: No response was received to the core_enumextcmd request.
#129 opened by myexploit - 1
- 1
Powershell Payload detected and by windows defender
#130 opened by BustedSec - 2
load stdapi - Failed to load extension: No response was received to the core_enumextcmd request.
#128 opened by myexploit - 2
cannot generate shellcode
#126 opened by leezp - 1
PLease trustedsec
#127 opened by tygaking009 - 8
Ask a question
#124 opened by haoqing1314 - 0
why your shellcode not involved ASLR
#123 opened by xiaozhu1337 - 2
[-] Unknown command: shell. set AutoLoadStdapi false stops Meterpreter working as expected.
#121 opened by myexploit - 2
exception handling request
#122 opened by johnjohnsp1 - 1
Macro runtime error
#120 opened by moaeddy - 1
Payload size exceeds size limit
#119 opened by 4noir - 1
Support for Win 7 version unicorn-3.6.8 – present
#118 opened by myexploit - 5
- 5
Please help answer my question sir
#113 opened by tygaking009 - 1
What is the "web server" mean?
#112 opened - 0
Persistence
#111 opened by tygaking009 - 0
Erase this please
#110 opened by brunoaduarte