aboutsummaryrefslogtreecommitdiff
path: root/AntivirusBypass
diff options
context:
space:
mode:
authorgarignack <garignack@gmail.com>2013-05-02 23:21:25 -0400
committergarignack <garignack@gmail.com>2013-05-02 23:21:25 -0400
commit6d9d805f1eac80ba65e1eb54aaff98b5d27d907d (patch)
tree44ec6ac2c94af38b86f5326f427cc25b0a5e35c1 /AntivirusBypass
parentacc46c71f758554ac4575283b7905a09cb437ba6 (diff)
downloadPowerSploit-6d9d805f1eac80ba65e1eb54aaff98b5d27d907d.tar.gz
PowerSploit-6d9d805f1eac80ba65e1eb54aaff98b5d27d907d.zip
Code cleanup based upon discussion comments
Added comment-based help parameter, added additional parameter validation, piped ReadStream.seek command to out-null to prevent output to stdout.
Diffstat (limited to 'AntivirusBypass')
-rw-r--r--AntivirusBypass/Find-AVSignature.ps118
1 files changed, 13 insertions, 5 deletions
diff --git a/AntivirusBypass/Find-AVSignature.ps1 b/AntivirusBypass/Find-AVSignature.ps1
index 7a3f7c4..80e2b1f 100644
--- a/AntivirusBypass/Find-AVSignature.ps1
+++ b/AntivirusBypass/Find-AVSignature.ps1
@@ -34,7 +34,11 @@ Specifies the path to the binary you want tested.
.PARAMETER OutPath
Optionally specifies the directory to write the binaries to.
-
+
+.PARAMETER BufferLen
+
+Specifies the length of the file read buffer . Defaults to 64KB.
+
.PARAMETER Force
Forces the script to continue without confirmation.
@@ -61,7 +65,8 @@ http://heapoverflow.com/f0rums/project.php?issueid=34&filter=changes&page=2
[CmdletBinding()] Param(
[Parameter(Mandatory = $True)]
- [Int32]
+ [ValidateRange(0,4294967295)]
+ [UInt32]
$StartByte,
[Parameter(Mandatory = $True)]
@@ -69,7 +74,8 @@ http://heapoverflow.com/f0rums/project.php?issueid=34&filter=changes&page=2
$EndByte,
[Parameter(Mandatory = $True)]
- [Int32]
+ [ValidateRange(0,4294967295)]
+ [UInt32]
$Interval,
[String]
@@ -79,7 +85,9 @@ http://heapoverflow.com/f0rums/project.php?issueid=34&filter=changes&page=2
[String]
$OutPath = ($pwd),
- [int]
+
+ [ValidateRange(1,2097152)]
+ [UInt32]
$BufferLen = 65536,
[Switch] $Force
@@ -143,7 +151,7 @@ http://heapoverflow.com/f0rums/project.php?issueid=34&filter=changes&page=2
Write-Verbose "Byte 0 -> $($SplitByte)"
#Reset ReadStream to beginning of file
- $ReadStream.Seek(0, [System.IO.SeekOrigin]::Begin)
+ $ReadStream.Seek(0, [System.IO.SeekOrigin]::Begin) | Out-Null
#Build a new FileStream for Writing
[String] $outfile = Join-Path $OutPath "$($FileName)_$($SplitByte).bin"