csharp_service_powershell_host

Description

Generates an obfuscated C# Windows Service that hosts and runs the ps_script payload.

Overview

Generates a C# Windows Service that embeds and runs the ps_script payload when started.

Parameters

Name Type Description
AmsiBypassTechnique CSharpAmsiBypassTechnique AMSI bypass. Default: AmsiScanBufferStringReplace.
FrameworkVersion CSharpCompilerFrameworkVersion Target .NET version. Default: Dotnet2.
Scroll to Top