From f625500f6be143b3ac801a4d256ba15436b285d9 Mon Sep 17 00:00:00 2001 From: x90slide <45627103+BinFault@users.noreply.github.com> Date: Sat, 20 Dec 2025 00:38:47 +0530 Subject: [PATCH 1/2] Create Powershell.yml --- yml/OSBinaries/Powershell.yml | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) create mode 100644 yml/OSBinaries/Powershell.yml diff --git a/yml/OSBinaries/Powershell.yml b/yml/OSBinaries/Powershell.yml new file mode 100644 index 00000000..1599e18a --- /dev/null +++ b/yml/OSBinaries/Powershell.yml @@ -0,0 +1,19 @@ +--- +Name: Powershell.exe +Description: Windows PowerShell +Author: x90slide +Created: 2025-12-20 +Commands: + - Command: + powershell + | % {echo ((new-object Net.Sockets.TcpClient).Connect("",$_)) "Port $_ is open"} 2>$null + + # Port range can be defined via 1..1024 and multiple ports can be defined via 80,443 + Description: Scans the IP address for open ports. + Usecase: Network Scanning + Category: Discovery + Privileges: User + MitreID: T1046 + OperatingSystem: Windows 10, Windows 11 +Full_Path: + - Path: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe From 60bb13ba09b62c8f34bb69ac91b73137b478889f Mon Sep 17 00:00:00 2001 From: x90slide <45627103+BinFault@users.noreply.github.com> Date: Sat, 20 Dec 2025 00:52:47 +0530 Subject: [PATCH 2/2] Update Powershell.yml --- yml/OSBinaries/Powershell.yml | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) diff --git a/yml/OSBinaries/Powershell.yml b/yml/OSBinaries/Powershell.yml index 1599e18a..536e1e88 100644 --- a/yml/OSBinaries/Powershell.yml +++ b/yml/OSBinaries/Powershell.yml @@ -4,10 +4,7 @@ Description: Windows PowerShell Author: x90slide Created: 2025-12-20 Commands: - - Command: - powershell - | % {echo ((new-object Net.Sockets.TcpClient).Connect("",$_)) "Port $_ is open"} 2>$null - + - Command: | % {echo ((new-object Net.Sockets.TcpClient).Connect("",$_)) "Port $_ is open"} 2>$null # Port range can be defined via 1..1024 and multiple ports can be defined via 80,443 Description: Scans the IP address for open ports. Usecase: Network Scanning