Antivirus databases contain millions of signatures, but Trojans still remain in the hacker's arsenal. Even public and well-known variants of Metasploit payloads, RAT variants and stealers can go undetected. How? Thanks to obfuscation! Even a PowerShell script can be hidden from the prying eyes of an antivirus.
• This repository contains a ton of useful techniques, examples and theory on the topic of manual obfuscation of PowerShell scripts. Well, most importantly, the contents of this repo are the result of trial and error by the author, who has extensive experience in conducting penetration tests.
➡ https://github.com/t3l3machus/PowerShell-Obfuscation-Bible
• Extras! Powershell for pentesters is a voluminous article that contains examples of various commands, tricks and useful things:
- Capture keystrokes;
- Extract Wi-Fi profiles and passwords;
- Retrieve saved browser passwords;
- Working with the network and uploading configurations;
- Uploading system information;
- Detailed uploading of information about running processes;
- Access to event logs;
- Execute scripts from the specified URL;
- Monitoring file system changes;
- Disable Windows Defender;
.... and a hundred more useful commands: https://redteamrecipe.com/
