Analýza škodlivých multiplatformních PowerShell skriptů

Abstract

The diploma thesis deals with the security of the tool PowerShell and malicious scripts created in it. The goal of the work was an analysis of the possibility of exploiting PowerShell Core by creating multiplatform malicious code. A part of the thesis covers the testing of selected existing scripts from penetration frameworks on the latest version of PowerShell Core on Windows, Linux and macOS systems. Several malicious scripts, which run on Windows and Linux operating systems, and even some on macOS, were created and described in the scope of the study. At the end of the work, specific steps are described to reduce the risk of attack.