Back to rankings

trustedsec / unicorn

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.

Repository stars
3,955All-time #15,595
Fork
815
Last push
updated 8 days ago
Repository created
since 2013
Apps & systemsTerminals & command linePythonLicense not declared
View source

About

Summarised by AI from the README; the original prevails

Author description: Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.

Basic listing based on official public information; functionality has not been independently evaluated.

Check before adopting

  • No license declared: commercial use and redistribution terms are unknown.
Platform
Not verified
Pricing
Pricing not verifiedCheck current official software, hosting, model and infrastructure pricing.
Maintenance notes
Not verified

Star trend

3,9543,9553,95511-03 · 3,95410-0710-1210-1710-2210-2711-0111-05
Raw observations · 2
Historical observations
Measured atRepository starsSource
2026-11-06 11:30 UTC3,955Source
2026-11-03 09:39 UTC3,954Source

First collected 2026-11-03Measured at 2026-11-06 11:30 UTCSourceLicense source

Compiled from public project information; not independently tested. · Repository stars, not unique users or individual-skill installs · License tiers are derived from metadata. Check obligations for your use; unknown does not mean prohibited.