6 Busting In and Getting Busted!
While the solution at the end of Chapter 5 does provide a working bypass for AppLocker and Constrained Language mode, it’s simply not practical to rebuild a project every time we launch a single command. To address that, we’ll crank up our previous build code to include a PowerShell-like console that interactively executes commands and displays the output. We can then use that to execute the PowerView script along with other reconnaissance commands and gather a bunch of new information.
Planting Our PowerShell
You’ll find the basic skeleton for a PowerShell console on Microsoft’s website (“Host06 Sample,” ...
Get How to Hack Like a Legend now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
