#powershell script

PowerShell Get Registry Value @vexpert #vmwarecommunities #100daysofhomelab #homelab #PowerShellRegistry #WindowsRegistry #Get-ItemPropertyCmdlet #Get-ChildItemCommand #RegistryKeys #RegistryValues #PowerShellScript #RemoteComputerManagement

The Windows Registry and registry editor have long been tools Windows admins have used to resolve issues, apply settings, etc. However, PowerShell makes automating registry changes or programmatically getting registry keys and their values very easy. PowerShell can interact with registry keys and easily get registry values. Table of contentsWhat is PowerShell?What is the Windows…

How to Configure Attack Surface Reduction in Microsoft Defender using PowerShell and Group Policy

Microsoft Defender Microsoft Defender is a free, built-in antivirus for Windows. It was formerly known as Windows Defender until May 10th, 2020, and is now also referred to as Windows Security in the most recent versions of Windows 10. It contains a number of security features aimed at protecting devices and the internet from malware such as spyware, adware, ransomware, and other threats. It is…

How to Create Bulk Users in Active Directory Users and Computers Using PowerShell

Creating Bulk Users in Active Directory Let’s say in your organization, you want to add new Active Directory users. To create users, you can use the user creation wizard in Active Directory Users and Computers. What if you need to create more than 10,000 users? It will take a long time if you do it yourself. In this article, you will learn how to use PowerShell to create bulk Active Directory…

Invisi-Shell - Hide Your Powershell Script In Plain Sight (Bypass All Powershell Security Features) #Powershell #Security #Linux #Windows

Hide your powershell script in plain sight! Invisi-Shell bypasses all of Powershell security features (ScriptBlock logging, Module logging, Transcription, AMSI) by hooking .Net assemblies. The hook is performed via CLR Profiler API.

Work In Progress This is still a preliminary version intended as a POC. The code works only on x64 processes and tested against Powershell V5.1. Usage

Copy the…

Invoke-PSImage - Embeds a PowerShell script in the pixels of a PNG file and generates a oneliner to execute #PowerShell #PNG #EMBED

Invoke-PSImage takes a PowerShell script and embeds the bytes of the script into the pixels of a PNG image. It generates a oneliner for executing either from a file of from the web (when the -Web flag is passed). The least significant 4 bits of 2 color values in each pixel are used to hold the payload. Image quality will suffer as a result, but it still looks decent. The image is saved as a PNG,…

Cloud PBX: Polycom VVX Master Directory

Reverse number lookup in Skype for Business online (cloud PBX) doesn’t give you much control. If you are deploying Polycom VVX phones you can get around this with a directory file.

(more…)

Decipher obfuscated URLs with PowerShell

I recently received a message on Skype from a friend I had not talked to for a while, I was happy to see it was spam. Not because it was spam, but because it was using an encoded Url. After taking a quick look at the structure I thought, this is definitely something I can decode. To me this looked like hexadecimal code, and I quickly threw together a PowerShell one-liners to decode to decode…