unicorn
✅ Recently maintainedUnicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.
3,954Stars
815Forks
07-day stars
Python · License unverified · Last push 2026-10-28
Official repository & installation ↗GitValue · Value evidence
Unscored · Evidence coverage 0%
Provisional rubric; documentation and runtime testing are separate. Missing evidence does not imply low value.
Star history
2025-09-292026-11-03
View historical data
| Date | Stars |
|---|---|
| 2026-10-05 | 3,949 |
| 2026-10-06 | 3,949 |
| 2026-10-07 | 3,949 |
| 2026-10-08 | 3,949 |
| 2026-10-09 | 3,949 |
| 2026-10-10 | 3,949 |
| 2026-10-11 | 3,949 |
| 2026-10-12 | 3,949 |
| 2026-10-13 | 3,951 |
| 2026-10-14 | 3,952 |
| 2026-10-15 | 3,952 |
| 2026-10-16 | 3,952 |
| 2026-10-17 | 3,952 |
| 2026-10-18 | 3,953 |
| 2026-10-19 | 3,953 |
| 2026-10-20 | 3,953 |
| 2026-10-21 | 3,954 |
| 2026-10-22 | 3,954 |
| 2026-10-23 | 3,954 |
| 2026-10-24 | 3,954 |
| 2026-10-25 | 3,954 |
| 2026-10-26 | 3,954 |
| 2026-10-27 | 3,954 |
| 2026-10-28 | 3,954 |
| 2026-10-29 | 3,954 |
| 2026-10-30 | 3,954 |
| 2026-10-31 | 3,954 |
| 2026-11-01 | 3,954 |
| 2026-11-02 | 3,954 |
| 2026-11-03 | 3,954 |
Get the project
git clone https://github.com/trustedsec/unicorn.gitCloning downloads the source. For dependencies and installation, follow the project README.
Related projects & alternative candidates
Related domains do not imply feature parity. Review official documentation and licenses.