3 ms·
powershell.exe is on all of them. Just load up System.Net.TcpListener/Client and bob’s your uncle.
by eddythompson80 3y ago
powershell.exe is on all of them. Just load up System.Net.TcpListener/Client and bob’s your uncle.
- deleted 3y ago[deleted]
- msm_ 3y agoRunning arbitrary Powershell scripts from disk during OS autostart is one of the (if not the) loudest things attacker could do. The point of this blog post is stealth. Nobody claims it's a vulnerability in VS code (or vulnerability in anything at all), just a convenient method of persistence.