UNICORN

Based on Matthew Graeber’s powershell attacks and the powershell bypass technique presented by our own David Kennedy and Josh Kelly at Defcon 18.

Usage is simple. Ensure Metasploit is installed and in the right path. Run Magic Unicorn.

This will generate a powershell command. Simply paste this to a command line window or through a payload delivery system.

Download How to Get UNICORN
Option 1
To download UNICORN, type the following command in Linux:
Copied
Options 2
View on Git
help How to Get Help with UNICORN

For bug reports or enhancements, please open an issue on this projects github page.

Introducing CoWitness: Enhancing Web Application Testing With External Service Interaction

As a web application tester, I encounter a recurring challenge in my work: receiving incomplete responses from Burp Collaborator during DNS and HTTP response testing. For example, Collaborator will provide the IP address that performed the DNS look up or HTTP Request. Sometimes, these responses turn out to be false positives caused by intrusion protection...
Read More