iso_container

Description

Runs another payload pipeline and embeds the output file into an ISO image.

Overview

This pipeline runs any other payload pipeline and packages its output as a named file inside an ISO 9660 image with Joliet extensions enabled. ISO files are often treated differently by security controls and can serve as an effective delivery container for payloads.

Parameters

Parameter Type Description
SourcePipeline string The name or ID of the pipeline whose output will be embedded inside the ISO. This parameter is mandatory.
FileName string The name of the file as it appears inside the ISO image. Defaults to payload.exe.

Example

The following example generates an obfuscated SpecterInsight implant and wraps it inside an ISO:

Get-Payload -Pipeline 'iso_container' -PipelineArgs @{ SourcePipeline = 'win_x64'; FileName = 'setup.exe' }
Scroll to Top