Learn Polymorphic Powershell Payload Techniques! [PAYLOAD]

Learn polymorphic PowerShell techniques from this epic payload by 0iphor13 -- a polymorphic TCP Reverse shell executed hidden in the background using the magic of DuckyScript 3
This Payload: hak5.org/blogs/payloads/rever...
PayloadStudio: PayloadStudio.Hak5.org
More Payloads: Payloads.Hak5.org
Hak5 -- Cyber Security Education, Inspiration, News & Community since 2005:
-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆
Our Site → www.hak5.org
Shop → shop.hak5.org
Discord → / discord
Subscribe → th-cam.com/users/Hak5Darr...
Support → / threatwire
Contact Us → / hak5
-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆
____________________________________________
Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community - where all hackers belong.

[@c0ri]

nice! BTW.. I typically use nc -lnvp so you can see the first connection without having to hit enter. Give it a go next time.

[@ramosel]

You're BACK!!

[@thestarsahil]

That's nice 🕊️ Something unique

[@elbowsout6301]

Great stuff!

[@therealbamtech]

This is epic!

[@RealCyberCrime]

I’m thinking about making a similar video but more documentary style

[@SourceCodeDeleted]

I love this show

[@tis_is_sparta6559]

Will it work on older rubber ducky?

[@p.martin9954]

🔥

[@leninanciani4375]

Are you sure there was an antivirus and windows defender in the target machine?

[@9595luke]

How does it run as an elevated powershell on the victim machine though surly they would get a UAC prompt if they wasn’t local admin..

[@numoru]

Gorgeous

[@bushmaster101]

so can i just download it and save on my usb ?

[@rlpetty13]

Neat!

[@taiquangong9912]

Nice. So can the old rubber ducky input PowerShell commands?

[@lordhelix1458]

Yes

[@taiquangong9912]

@@lordhelix1458 Thank you, I will play with it and figure out things

[@ronratliff8320]

Hey there ! Where can we get those sweet bash bunny and ducky canvas's in the background. I am confident I am not the only one who wants one.

[@statistical-anomaly]

Lmao I was thinking the same thing as soon as I saw them!

[@r3d53v3n]

I have the Payload Studio Pro but don't see version 1.3.0 only 1.2.2. Does this update automatically or do I need to enter a beta channel. Can't find any options for a beta channel

[@hak5]

PayloadStusio updates automatically; 1.3 is currently in beta which you can find here beta.payloadstudio.hak5.org

[@idontwantahandle231]

I was wondering the same. I can get the payload to run successfully but my lister wont connect, I was wondering if the 1.2.2 had anything to with it 🤷🏻‍♂️

[@r3d53v3n]

@@hak5 Thank you! Much appreciated

[@kamikaze_sno]

nice

[@Canadian789119]

Capslock & capslock
:)

[@SupermotoZach]

Anyone know why HAK5 don't do the old around the table studio style eps anymore ? I miss that format.

[@konradwerner4134]

Covid fucked it up

[@leninanciani4375]

And what about a firewall and rules for outside connections, ain’t it better to set 80 port for the connection?

[@statistical-anomaly]

In practice yes, but for the purposes of the video it wasn't necessary (and frankly unless someone's a script kiddy then they'll know to change the port to something innocuous like you suggested.)

[@MiguelGomez-qx7qc]

can you have persistence with this payload?

[@statistical-anomaly]

I imagine if it were to create a .bin as a startup process it could maintain persistence (anyone with more knowledge feel free to correct me if I'm wrong.)

[@fiftyshades1413]

1 wat is rubber ducky?
2 wat is payload n how to use?
3 to learn code wat r the basic characters to start with...?
4.How to get any wifi password?
5 wat is Kali Linux on how to use it?

[@cleightthejw2202]

@Hak5
What happened to Cody and the other gentleman's live show? I haven't seen them in a while now, a couple months I believe.

[@userou-ig1ze]

blueteam is like ... time for some regex

[@ip7427]

memory for holding random variables is too small :( anything more elaborate and it stops working at some point as no more randoms are generated/stored

[@Pronobozo]

please be responsible when using.

[@az.tek.00]

Love seeing D.K. - FKN 1337.
💜☮💙🌐💚👽💛😎🧡🏴‍☠️❤💯

[@ac9206]

That is some terrible "polymorphism" (too easily detected/blocked)

[@UNcommonSenseAUS]

Roflmao