trustedsec / unicorn
Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.
Purpose and fit
Author description: Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.
Basic listing based on official public information; functionality has not been independently evaluated.
Sources: official source 1 · official source 2. Based on public basic information; not an in-depth evaluation.
- Browse by purpose
- Command-line tools
- Platform
- Not verified
- Pricing
- Pricing not verifiedCheck current official software, hosting, model and infrastructure pricing.
Insufficient history
Repository info
Repository stars, not unique users or individual-skill installs
- Type
- Apps & systems
- Subcategory
- Terminals & command line
- Platform
- Not verified
- First collected
- 2026-11-03
- Language
- Python
- License
- License not declared
- Repository created
- 2013-06-19
- Last push
- 2026-10-28
- Measured at
- 2026-11-03 09:39 UTC
- Pricing
- Pricing not verified
- Cost details
- Check current official software, hosting, model and infrastructure pricing.
- Maintenance notes
- Not verified
License tiers are derived from metadata. Check obligations for your use; unknown does not mean prohibited.
Tags
Historical observations
Raw observations below are not daily gains.
| Measured at | stars | Source |
|---|---|---|
| 2026-11-03 09:39:49 UTC | 3,954 | Source |