Forum Discussion
PRABAKARANRAMAMURTHY
Advocate
AdvocatePowerShell Deobfuscation: Ep.8 - Stuck Halfway
I was working on Ep.8 of PowerShell Deob. Got stuck in second step. Step 1: Base64 & RAW Inflate (Twice) Step 2: Stuck with this weird looking code. Tried to run with PowerShell and received...
Try
Set-PSDebug -Trace 1
and put
Write-Output to the beginning of the script and then running it in a console.
you should then get a lot of CHAR output.
Put that in CyberChef and decode from there.
The labs change every time though as they use invoke obfuscation during vm spinup
SamDickison
Community Manager
Community ManagerHey PRABAKARANRAMAMURTHY - just checking in to see if you managed to get through with netcat's help.
