Powershellarsenal - A Powershell Module Dedicated To Opposite Engineering
PowerShellArsenal is a PowerShell module used to assistance a contrary engineer. The module tin last used to disassemble managed in addition to unmanaged code, perform .NET malware analysis, analyze/scrape memory, parse file formats in addition to retentiveness structures, obtain internal organisation information, etc. PowerShellArsenal is comprised of the next tools: Disassembly Disassemble native in addition to managed code. Get-CSDisassembly Disassembles a byte array using the Capstone Engine disassembly framework. Get-ILDisassembly Disassembles a raw MSIL byte array passed inward from a MethodInfo object inward a fashion similar to that of Ildasm. MalwareAnalysis Useful tools when performing malware analysis. New-FunctionDelegate Provides an executable wrapper for an X86 or X86_64 function. Invoke-LoadLibrary Loads a DLL into the electrical flow PowerShell process. New-DllExportFunction Creates an executable wrapper delegate some an unmanaged, exported f...