Cyberdefense/DeepBlueCLI
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Added another base64 encoding method

Browse Source
This commit is contained in:
Eric Conrad
2021-10-29 16:37:26 -04:00
committed by GitHub
parent e3bf84fe51
commit cf9411f721
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
DeepBlue.ps1
View File

@ -692,6 +692,9 @@ function Check-Command(){
if ($commandline -Match "\-enc.*[A-Za-z0-9/+=]{100}"){ if ($commandline -Match "\-enc.*[A-Za-z0-9/+=]{100}"){
$base64= $commandline -Replace "^.* \-Enc(odedCommand)? ","" $base64= $commandline -Replace "^.* \-Enc(odedCommand)? ",""
} }
ElseIf ($commandline -Match "\-En.*[A-Za-z0-9/+=]{100}"){
$base64= $commandline -Replace "^.* \-En",""
}
ElseIf ($commandline -Match ":FromBase64String\("){ ElseIf ($commandline -Match ":FromBase64String\("){
$base64 = $commandline -Replace "^.*:FromBase64String\(\'*","" $base64 = $commandline -Replace "^.*:FromBase64String\(\'*",""
$base64 = $base64 -Replace "\'.*$","" $base64 = $base64 -Replace "\'.*$",""