Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Replacing sharpsh with powerspace #58

Open
n3rada opened this issue Sep 2, 2024 · 0 comments
Open

Replacing sharpsh with powerspace #58

n3rada opened this issue Sep 2, 2024 · 0 comments

Comments

@n3rada
Copy link

n3rada commented Sep 2, 2024

Hi maintainers 👋,

The tool currently in the armory that uses RunspaceFactory to execute a PowerShell command to bypass AppLocker seems less compatible than powerspace.

In one of your article, John Guild discussed using sharpsh. He mentioned the need to adapt commands to the console format, which can introduce unnecessary complexity. PowerSpace, on the other hand, uses Windows-style argument parsing with the / convention. This simplifies command execution and reduces the chances of errors, making it more user-friendly, especially for those who are already familiar with Windows command-line conventions.

For instance, in Sliver, the current command structure requires passing arguments after --. With PowerSpace, this step is unnecessary because of the way arguments are parsed. Moreover, PowerSpace provides verbose debugging output, which helps in ensuring that commands are passed and executed correctly, offering better visibility into the process—this can be invaluable for troubleshooting and ensuring that everything runs smoothly. Of course, if you find having so much output annoying, I can modify this so that it only happens with a /d or /debug.

Additionally, I’ve integrated the necessary alias.json directly into the Sliver folder within the repository, making it Fork-ready.

It's mainly to see if I'm deleting this repository or if it might be of interest to you. Thank you for considering this suggestion.

Best regards,

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant