Tag

PowerShell

8 stories

Smuggling Code: How ClickFix Uses Browser Cache to Beat Windows Run Limits

ClickFix attacks have evolved from simple social-engineering lures into highly creative delivery mechanisms that turn a user's own system into the execution environment. Recent Microsoft telemetry describes a variant that stages malicious scripts inside a victim's browser cache—disguised as innocuous PNG files—and then convinces the user to paste a short command that triggers execution of that cached payload. By hiding the payload in cache entries and later reconstituting it on…

Saugata DattaOct 6, 20264 min read46

Automation

The Credential-Free Watchdog: Mastering Event-Driven App Automation

We have all been there. You are an automation lover. You have built a masterpiece — a Scheduled Task, perfectly configured, credentials entered, running like clockwork. You walk away like a hero. Then Monday morning hits. Your account is locked. Your coffee tastes like failure. I once left a mapped network drive in an SOE test build and completely forgot about it. Windows did not forget. Every night it faithfully…

Saugata DattaMay 7, 202612 min read147

PowerShell

Ditching PsExec – Running Interactive SYSTEM Shells Natively in PowerShell

If you’ve spent any time in Windows System Administration over the last decade, I can almost guarantee you’ve reached for PsExec at least once. Originally from Sysinternals and now officially part of Microsoft, PsExec is one of those deceptively simple tools that has quietly saved thousands of IT professionals from hours of sheer agony. A single executable, zero installation, no messy dependencies. You drop it on a machine, and it…

Saugata DattaMay 2, 202617 min read268

Cybersecurity

Pastebin-Hosted PowerShell Script Hijacks Telegram Sessions: What Happened and How to Respond

Security researchers recently uncovered a PowerShell script posted on Pastebin that was purpose-built to steal Telegram session data from both desktop and web clients. Masquerading as a benign “Windows Telemetry Update,” the script quietly collects host metadata, locates Telegram session stores, compresses them into an archive, and exfiltrates the file to an attacker-controlled Telegram bot. The discovery is notable less for raw sophistication than for the clear window it provides…

Saugata DattaApr 25, 20265 min read188

Cybersecurity

Microsoft Adds Native System Monitor (Sysmon) Support to Windows 11

Microsoft has begun shipping System Monitor (Sysmon) as a native, opt-in capability in Windows 11 preview builds. This change moves a widely used, high-fidelity endpoint telemetry tool from an optional Sysinternals download to an OS-managed feature. For security teams, IT operations, and incident responders, native Sysmon promises simpler deployment, stronger integration with Windows management channels, and a more consistent telemetry baseline across managed fleets — provided organizations adopt it carefully…

Saugata DattaFeb 6, 20266 min read730

Automation

Face-Off: Windows PowerShell vs PowerShell Core — The Real-World Transition

PowerShell has come a long way since its inception, becoming an essential tool not only for Windows administrators but also for IT professionals working across platforms. The transition from the original Windows PowerShell to PowerShell Core represents more than just a version change—it’s a fundamental evolution in how command-line automation and configuration management are approached in the modern IT landscape. For those who have relied on the familiar blue prompt…

Saugata DattaJan 16, 20264 min read937

Automation

PowerShell in DevOps Workflows — GitHub Actions & CI/CD

PowerShell’s evolution from a Windows-centric scripting language to a cross-platform automation powerhouse has firmly planted it in the heart of modern DevOps. Nowhere is this transformation more apparent than in the continuous integration and continuous deployment (CI/CD) pipelines that drive reliable software delivery. GitHub Actions, with its ease of workflow automation and native integration with the world’s largest code hosting platform, empowers DevOps teams to use PowerShell in ways that…

Saugata DattaJan 15, 20264 min read860

Hacking and Exploits

Port Scanner using PowerShell with Email Notification

Few days back I was asked to create a script, which will check RDP port status of multiple servers and send the result as an email notification. I have searched for few, but unfortunately there was no ready script for that. I decided to build one using PowerShell, and came out with following script. Hope this script might help you as well. #Which port to scan $port = 3389 #Path…

Saugata DattaJul 11, 20141 min read11.1K

Free Tools: IP, DNS, SSL