1. In PowerShell, there are very useful cmdlets that run strings as commands: Invoke-Expressions and Invoke-Command. The Invoke-Expression cmdlet evaluates or runs a specified string as a command and returns the results of the expression or command. Without Invoke-Expression, a string submitted at the command line is returned (echoed) Invoke-Command, on the other hand, runs commands on a local or remote computer and returns all output from the commands, including errors. Suppose a web C2 backdoor communicates using base64-encoded comment as follows: <-R2VOLVByb2Nlc3MK--> The victim system would request a pre-configured web page over HTTP. Write a PowerShell function that accepts the above base64 encoded string, decodes it and execute it as PowerShell command. (hint use Invoke- Expressions)

Computer Networking: A Top-Down Approach (7th Edition)
7th Edition
ISBN:9780133594140
Author:James Kurose, Keith Ross
Publisher:James Kurose, Keith Ross
Chapter1: Computer Networks And The Internet
Section: Chapter Questions
Problem R1RQ: What is the difference between a host and an end system? List several different types of end...
icon
Related questions
Question
1. In PowerShell, there are very useful cmdlets that run strings as commands:
Invoke-Expressions and Invoke-Command. The Invoke-Expression cmdlet
evaluates or runs a specified string as a command and returns the results of
the expression or command. Without Invoke-Expression, a string
submitted at the command line is returned (echoed) Invoke-Command, on
the other hand, runs commands on a local or remote computer and returns
all output from the commands, including errors. Suppose a web C2
backdoor communicates using base64-encoded comment as follows:
<html>
<-R2VOLVByb2Nlc3MK-->
</html>
The victim system would request a pre-configured web page over HTTP.
Write a PowerShell function that accepts the above base64 encoded string,
decodes it and execute it as PowerShell command. (hint use Invoke-
Expressions)
Transcribed Image Text:1. In PowerShell, there are very useful cmdlets that run strings as commands: Invoke-Expressions and Invoke-Command. The Invoke-Expression cmdlet evaluates or runs a specified string as a command and returns the results of the expression or command. Without Invoke-Expression, a string submitted at the command line is returned (echoed) Invoke-Command, on the other hand, runs commands on a local or remote computer and returns all output from the commands, including errors. Suppose a web C2 backdoor communicates using base64-encoded comment as follows: <html> <-R2VOLVByb2Nlc3MK--> </html> The victim system would request a pre-configured web page over HTTP. Write a PowerShell function that accepts the above base64 encoded string, decodes it and execute it as PowerShell command. (hint use Invoke- Expressions)
Expert Solution
trending now

Trending now

This is a popular solution!

steps

Step by step

Solved in 2 steps

Blurred answer
Recommended textbooks for you
Computer Networking: A Top-Down Approach (7th Edi…
Computer Networking: A Top-Down Approach (7th Edi…
Computer Engineering
ISBN:
9780133594140
Author:
James Kurose, Keith Ross
Publisher:
PEARSON
Computer Organization and Design MIPS Edition, Fi…
Computer Organization and Design MIPS Edition, Fi…
Computer Engineering
ISBN:
9780124077263
Author:
David A. Patterson, John L. Hennessy
Publisher:
Elsevier Science
Network+ Guide to Networks (MindTap Course List)
Network+ Guide to Networks (MindTap Course List)
Computer Engineering
ISBN:
9781337569330
Author:
Jill West, Tamara Dean, Jean Andrews
Publisher:
Cengage Learning
Concepts of Database Management
Concepts of Database Management
Computer Engineering
ISBN:
9781337093422
Author:
Joy L. Starks, Philip J. Pratt, Mary Z. Last
Publisher:
Cengage Learning
Prelude to Programming
Prelude to Programming
Computer Engineering
ISBN:
9780133750423
Author:
VENIT, Stewart
Publisher:
Pearson Education
Sc Business Data Communications and Networking, T…
Sc Business Data Communications and Networking, T…
Computer Engineering
ISBN:
9781119368830
Author:
FITZGERALD
Publisher:
WILEY