如何绕过应用程序白名单和受限的PowerShell

echo 48 65 6C 6C 6F 2C 57 6F 72 6C 64 21 >hex.txt
::生成 hex.txt，机器码对应的内容是 Hallo World!

certutil -decodehex hex.txt bin.txt
::Hex2Bin

certutil -encode bin.txt Encode.txt
::Base64_Encode

certutil -decode Encode.txt Decode.txt
::Base64_Decode

 

 

 

 

https://improsec.com/blog//babus ... strained-powershell
如何绕过应用程序白名单和受限的PowerShell
现在来说powershell真的方便多了