windows enabled community high v1.0.0

launch-vsdevshell

Locates and imports a Developer PowerShell module and calls the Enter-VsDevShell cmdlet Located at: C:\Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\Tools\Launch-VsDevShell.ps1; C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\Tools\Launch-VsDevShell.ps1.

📋 Live Preview
launch-vsdevshell
launch-vsdevshell

Sandbox: execFile · Timeout: 30s

Capabilities

security.execution.command

Contract

Outputs

process.output

Command execution output

Side effects: process_spawn

Workflow Edges

Produces

process.output

Resource Profile

ResourceValue
CPUlow
Memory16 MB
Networklow
Disk I/Olow

Examples

Execute binaries from the context of the signed script using the "VsWherePath" flag. (Proxy execution)

powershell -ep RemoteSigned -f .\Launch-VsDevShell.ps1 -VsWherePath {PATH_ABSOLUTE:.exe}

Execute binaries and commands from the context of the signed script using the "VsInstallationPath" flag. (Proxy execution)

powershell -ep RemoteSigned -f .\Launch-VsDevShell.ps1 -VsInstallationPath "/../../../../../; {PATH:.exe} ;"

Detection

Documentation

launch-vsdevshell

launch-vsdevshell is a Windows LOLBin. Locates and imports a Developer PowerShell module and calls the Enter-VsDevShell cmdlet Located at: C:\Program Files (x86)\Microsoft Visual Studio\2019\Community\Common7\Tools\Launch-VsDevShell.ps1; C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\Tools\Launch-VsDevShell.ps1.

References