Unicorn – PowerShell Downgrade Attack

Find your website's Achilles' Heel


Magic Unicorn is a simple tool for using a PowerShell downgrade attack to inject shellcode straight into memory. Based on Matthew Graeber’s PowerShell attacks and the PowerShell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.

Unicorn - PowerShell Downgrade Attack

Usage is simple, just run Magic Unicorn (ensure Metasploit is installed and in the right path) and magic unicorn will automatically generate a PowerShell command that you need to simply cut and paste the PowerShell code into a command line window or through a payload delivery system.

Unicorn is a PowerShell injection tool utilizing Matthew Graebers attack and expanded to automatically downgrade the process if a 64 bit platform is detected. This is useful in order to ensure that we can deliver a payload with just one set of shellcode instructions. This will work on any version of Windows with PowerShell installed. Simply copy and paste the output and wait for the shells.

You can download Unicorn here:

unicorn-2.3.zip

Or read more here.


Posted in: Hacking Tools, Windows Hacking

, , , , , , , , , , ,

Recent in Hacking Tools:
- MANA Toolkit – Rogue Access Point (evilAP) And MiTM Attack Tool
- BBQSQL – Blind SQL Injection Framework
- DET – Data Exfiltration Toolkit

Related Posts:

Most Read in Hacking Tools:
- Top 15 Security/Hacking Tools & Utilities - 1,992,237 views
- Brutus Password Cracker – Download brutus-aet2.zip AET2 - 1,477,870 views
- wwwhack 1.9 – Download wwwhack19.zip Web Hacking Tool - 687,106 views

Get protected with Sucuri


Comments are closed.