gggg / test /payload
enotkrutoy's picture
Rename test/calc to test/payload
084a764 verified
raw
history blame
284 Bytes
#Invoke-Item c:\windows\system32\calc.exe
$payloadParameters = "start-process calc.exe";
$encodedPayload = [System.Convert]::ToBase64String([System.Text.Encoding]::Unicode.GetBytes($payloadParameters));
$payload = "powershell.exe -ep Bypass -noexit -enc $encodedPayload"
$payload|IEX;