Triggers Stage 1 either with pure PowerShell using reflections (trigger_type = 1) or with PowerShell invoking a .NET assembly, running stage1 (tr

blocks till result_recieved is set to true

This remote Powershell method calls "core_create_proc" in order to create a remote process The response is handled by "handler_client_core_create

usage: FireStage1 <trigger_type> <trigger_delay in milliseconds> [nohide] [uac] Fires stage 1 via HID keyboard against a PowerShell process on a

Print a list of processes managed by the remote client

Shows which language is set for HID keyboard.

Try to kill the remote client

Try to kill the given remote process

Prints out everything on target through HID keyboard. Be sure to set the correct keyboard language for your target (use 'GetKeyboardLanguage' an

Sets the language for target keyboard interaction. Possible values: be, br, ca, ch, de, dk, es, fi, fr, gb, hr, it, no, pt, ru, si, sv, tr,

If the client is connected, command arguments given should be reflected back. Communications happen through a pure HID covert channel.