csharp_powershell_host

Description

Generates an obfuscated C# executable that hosts and runs the ps_script payload.

Overview

Generates a C# executable that embeds and runs the ps_script payload in a hosted PowerShell runspace.

Parameters

Name Type Description
AmsiBypassTechnique CSharpAmsiBypassTechnique AMSI bypass. Default: AmsiScanBufferStringReplace.
FrameworkVersion CSharpCompilerFrameworkVersion Target .NET version. Default: Dotnet2.
Scroll to Top