WEBVTT

00:00:05.340 --> 00:00:09.480
Welcome to Pluralsight and this Red Team Tools course featuring Unicorn,

00:00:09.800 --> 00:00:13.440
the open source tool for generating PowerShell attacks developed by Dave

00:00:13.440 --> 00:00:17.550
Kennedy and maintained by multiple contributors on GitHub.

00:00:17.550 --> 00:00:21.530
Unicorn is a tool that penetration testers and ethical hackers

00:00:21.530 --> 00:00:25.000
can use to generate PowerShell commands quickly and easily to

00:00:25.010 --> 00:00:27.360
execute PowerShell downgrade attacks.

00:00:28.540 --> 00:00:32.549
Unicorn leverages a vulnerability in the way Windows processes PowerShell

00:00:32.549 --> 00:00:36.380
commands to enable the execution of shellcode on Windows hosts.

00:00:37.240 --> 00:00:38.310
Using Unicorn,

00:00:38.540 --> 00:00:42.160
you can generate a variety of attacks exploiting this vulnerability.

00:00:43.240 --> 00:00:45.700
Unicorn's full name is Magic Unicorn,

00:00:45.890 --> 00:00:48.910
likely due to its simplicity and capability.

00:00:49.840 --> 00:00:53.370
Come join me as we use Unicorn for execution and attack

00:00:53.370 --> 00:00:55.480
our targets with multiple methods.