Skip to content
A simple script to shim aliases
PowerShell
Branch: master
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
LICENSE
README.md
remap.ps1

README.md

Remapper

PowerShell script that will shim aliases throughout PowerShell sessions through the use of PowerShell profiles.

Why

This is an interesting technique that red teamers can use to maintain persistence as well as achieve code execution.

See more here Abusing_Aliases

How to Use?

Edit the first few lines where functions are defined this is where you want to modify the functions. After that make sure with the shimmed_alias function after $value you put your functions if you modified their names or added or removed any. After that simply run the script.

License

This project is licensed under the BSD 3-Clause License - see the License file for details

Roadmap

  • Add option to shim aliases for Command Prompt Sessions
  • Research if shimming built in PowerShell functions if feasible
  • Add option to deploy through CLR hooking instead of PowerShell Profile
You can’t perform that action at this time.