trustedsec/unicorn
Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.
PythonNOASSERTION
Issues
- 3
A small question
#109 opened - 0
Windows7 cs hta issues
#108 opened - 0
Custom .ps1 to .hta?
#107 opened - 5
Again patched by windows.
#106 opened - 3
what are you trying to do?
#105 opened - 1
Powershell attack patched.
#104 opened - 1
Running Unicorn Payloads on Other Systems
#103 opened - 1
Session died
#102 opened - 1
- 3
- 4
Help where is my EXE payload saved?
#99 opened - 5
DNS Fails to generate
#98 opened - 6
- 8
CS Macro
#96 opened - 2
could not get back a session
#95 opened - 1
- 7
Macro download&exec
#93 opened - 1
- 3
unicorn not working
#91 opened - 2
Can't get past kaspersky endpoint
#90 opened - 6
- 1
HTA file not generating
#87 opened - 1
64-bit support
#86 opened - 4
Do not get session
#85 opened - 2
MS Office 2016 Macro doesn't work
#84 opened - 1
PowerShell Empire
#83 opened - 1
Session not coming back
#82 opened - 0
windows defender
#81 opened - 1
- 1
Please explain how/why it works
#79 opened - 7
Windows 10 Powershell macro payload
#78 opened - 1
session not coming even after the update
#76 opened - 1
Powershell Attack issue
#75 opened - 0
.bat opens then closes right after
#74 opened - 2
. Settingscontentms
#73 opened - 2
issue with powershell payload
#72 opened - 1
PowerShell attack issue
#71 opened - 1
Access is Denied
#70 opened - 1
-WindowStyle hidden -- not working
#69 opened - 4
powershell.exe has moved to virus chest
#68 opened - 3
- 5
- 5
- 3
- 6
- 2
- 2
not able to generate payload
#60 opened - 0
- 1
- 1
file is not downloaded or executed.
#57 opened