SteveSec
  • Writing
  • About

Posts tagged "Offensive-Security"

← All posts

January 1, 2025 3 min read

VS Code PowerShell Execution

Using VS Code's Microsoft-signed, trusted PowerShell terminal to run scripts where powershell.exe is locked down by AppLocker, WDAC, or Constrained Language Mode, and how defenders can catch it.

offensive-security powershell bypass

© 2026 Steve Nelson

xor eax, eax ; ret