P4wnP1 icon indicating copy to clipboard operation
P4wnP1 copied to clipboard

How to encrypt the FireStage1 file and where is it?

Open SketchTurnerDev opened this issue 1 year ago • 1 comments

Hi, How can I encrypt the powershell script that is sent with the firestage1 command and where is it located? It is already recognized by many antiviruses. I tried to find file with powershell code first. I found:https://github.com/RoganDawes/P4wnP1/blob/master/hidtools/payload_delivery/stage1_mini.ps1 but it don’t match what is sent to the console.

PS: I don't understand much about powershell )

SketchTurnerDev avatar Jan 07 '24 23:01 SketchTurnerDev

use the c++ code inside the hid payload script .. and use also some signature

Aakashjain212 avatar Feb 05 '24 16:02 Aakashjain212