pentest-ref | Pentest Command Reference

Target Config

VPS TARGET C2PORT HTTPPORT USER PASS HASH

Insert Command

Target Config

VPS TARGET C2PORT HTTPPORT USER PASS HASH

● Config applied — all commands updated

⌨ PS Encoder

📋 Playbooks

Select a command from the list

PowerShell Encoder / Decoder

Shell type

Custom Reverse Shell Download & Exec AMSI Bypass whoami (test)

VPS fills {{VPS}}

Port fills {{C2PORT}}

PowerShell Input

PowerShell command (raw)

Output / Result

Invisible Encoder (Zero-Width Unicode)

Input (raw command or paste encoded from above)

Output (invisible - appears empty)

Run: .\invisible.ps1 or powershell -ep bypass -File invisible.ps1
Verify hex: Format-Hex .\invisible.ps1 — look for E2 80 8B (U+200B) and E2 80 8D (U+200D)

Demo: cat shows garbage, Format-Hex reveals the truth. Chain with multiple layers for deep evasion.

XOR Encoder / Decoder

XOR Key (hex or string) e.g. 0x41, 0xFF, secret, AB

Input (plain text or hex bytes)

Output

Binary ↔ Hex Cheat Sheet

            0000 = 00100 = 41000 = 81100 = C
            0001 = 10101 = 51001 = 91101 = D
            0010 = 20110 = 61010 = A1110 = E
            0011 = 30111 = 71011 = B1111 = F
          

Split byte into nibbles: 0111 0000 → 7 and 0 → 0x70
XOR rule: same bits = 0, different bits = 1. A XOR A = 0, A XOR 0 = A