Forum Discussion

retornet's avatar
retornet
Icon for Bronze III rankBronze III
6 months ago
Solved

Threat Hunting: Investigating a Fake PoC Q9

I am having issues trying to solve this last question. After running some obfuscated Powershell commands, the program outputs either a success or a failure message. What command is executed that set...
  • netcat's avatar
    6 months ago

    Assuming you solved the previous questions, found the main function:
    Locate the row with "text = foo.bar()" and enter "foo.bar()". Too easy.