Forum Discussion

Sherlock120192's avatar
Sherlock120192
Icon for Bronze I rankBronze I
4 months ago

powershell-deobfuscation-ep-8

Hello,

I have been stuck on this for sometime.

I was decode till this,

Can anybody help me after this, how do I decode it using Cyberchef.

other

1 Reply

  • autom8on's avatar
    autom8on
    Icon for Silver I rankSilver I
    4 months ago

    Don't decode it using Cyberchef? 

    It's obfuscated powershell code? Run it in powershell with "Set-PSDebug-Trace 1" turned on and see what it spits out? You should get something far more readable...

    That's how I did it when it was in the Xmas 2021 lab...