I cant get this to work! I found another thread when searching for how to escape special char, but it seem to not work for me. copying that code
Q STRING \$Bunny \= \(gwmi win32_volume -f \'label\=\'\'BashBunny\'\'\' \| Select-Object -ExpandProperty DriveLetter\)
in my bunny outputs this to notepad
$Bunny = (gwmi win32_volume -f <label=<<BashBunny<<< ~ Select-Object -ExpandProperty DriveLetter)
the code from the WiPassDump payload
Q STRING '.((gwmi wi