(PowerShell) Right-to-Left Override (RLO) Extension Spoofing by Jean-Pierre LESUEUR (DarkCoderSc)
Created the Thursday 03 August 2023. Updated 2 weeks, 2 days ago.
Description:
In this example malware.exe becomes Annexe.jpeg but keeps its executable properties.
Code
Rename-Item -Path malware.exe -NewName ("Ann" + ( [char]0x202E) + "gepj.exe")