Bite Code! @bitecode.dev · Mar 18 It even uses the fact powershell can run basde64 encoded scripts to make it more opaque:
0 likes 1 replies
?
Replies
To be fair, on one hand, Invoke-WebRequest makes those attacks easier (since they can download the rest of the payload with it), on the other hand, it's the same with curl + wget, and I'm glad we finally have a dl + exec command for all OSes. Plus PS scripts are usually restricted on corp devices.