PowerShell
A cross-platform task automation and configuration management framework introduced by Microsoft, deeply integrated with the .NET runtime. It enables direct invocation of Windows APIs, manipulation of the registry, and management of services and scheduled tasks.
Core Facts
Timeline (last 90 days)
In PowerShell, irm is an alias for Invoke-RestMethod and iex is Invoke-Expression; the irm ... | iex combination is equivalent to downloading a remote script and executing it directly, similar to curl | bash on Unix. The official recommendation is the two-step method $s = irm ...; iex $s.
The commands executed via ClickFix are often obfuscated PowerShell or mshta instructions that pull the next-stage malicious payload from a remote CDN; because the download and execution occur within a system process rather than a browser sandbox, they can bypass protective layers such as SmartScreen.
Windows-MCP's Python server inherits the full privilege level of the host application that launches it, and the default toolset includes system administration capabilities such as PowerShell execution and registry editing.
The PowerShell command length limit has been increased from approximately 1 KB to 32 KB.
Mahmoud rewrote a large number of actions that originally required LLM calls into reading JSON files and executing PowerShell/Bash scripts, in order to save tokens and reduce time consumption
When the Agent needs to run Linux commands, Harness Desktop uses WSL as a standalone tool rather than replacing the system's PowerShell
On Windows, a permission bypass vulnerability was fixed in the PowerShell tool that allowed cmd /c rd, rmdir, del, and erase to delete drive roots or home directories—directories that Remove-Item would reject.
The basic step to install WSL 2 is to run `wsl --install` as an administrator in PowerShell.
The command to start the service is ./clewd-codex-api.exe --config config.yaml.
ClickFix typically writes a PowerShell or mshta command to the clipboard in the page's background, so that by the time the user clicks the verification button, the clipboard contents have already been replaced.
14 more timeline events
All Facts (20)
TUN mode works by creating a virtual network interface at the operating system level to take over all traffic and route it to proxy nodes
65%UnverifiedGemini CLI安装需要使用PowerShell而非普通cmd，且需要开启代理（科学上网）模式才能成功安装
85%UnverifiedAI在调试过程中遇到了PowerShell语法兼容问题，不支持&&运算符，需要拆分命令
85%UnverifiedIn PowerShell, irm is an alias for Invoke-RestMethod and iex is Invoke-Expression; the irm ... | iex combination is equivalent to downloading a remote script and executing it directly, similar to curl | bash on Unix. The official recommendation is the two-step method $s = irm ...; iex $s.
50%UnverifiedThe commands executed via ClickFix are often obfuscated PowerShell or mshta instructions that pull the next-stage malicious payload from a remote CDN; because the download and execution occur within a system process rather than a browser sandbox, they can bypass protective layers such as SmartScreen.
50%UnverifiedWindows-MCP's Python server inherits the full privilege level of the host application that launches it, and the default toolset includes system administration capabilities such as PowerShell execution and registry editing.
50%UnverifiedThe PowerShell command length limit has been increased from approximately 1 KB to 32 KB.
50%UnverifiedMahmoud rewrote a large number of actions that originally required LLM calls into reading JSON files and executing PowerShell/Bash scripts, in order to save tokens and reduce time consumption
50%UnverifiedWhen the Agent needs to run Linux commands, Harness Desktop uses WSL as a standalone tool rather than replacing the system's PowerShell
50%UnverifiedOn Windows, a permission bypass vulnerability was fixed in the PowerShell tool that allowed cmd /c rd, rmdir, del, and erase to delete drive roots or home directories—directories that Remove-Item would reject.
50%UnverifiedThe basic step to install WSL 2 is to run `wsl --install` as an administrator in PowerShell.
50%UnverifiedThe command to start the service is ./clewd-codex-api.exe --config config.yaml.
50%UnverifiedClickFix typically writes a PowerShell or mshta command to the clipboard in the page's background, so that by the time the user clicks the verification button, the clipboard contents have already been replaced.
50%UnverifiedThe terminal window running a service cannot be closed, because it hosts the service that is currently running.
50%UnverifiedDecky software supports multiple trigger types including hotkeys, launching programs and websites, macros, and PowerShell scripts.
50%UnverifiedIn this solution, workspace spin-up and teardown are fully scripted and consume almost no tokens, in order to control cost overhead.
50%UnverifiedThe solution uses PowerShell scripts to manage workspace bring-up and teardown, consuming almost no tokens in order to control costs.
50%UnverifiedDot-sourcing in PowerShell injects the functions, variables, and aliases of the referenced script into the current scope, similar to Bash's source command.
50%UnverifiedThe solution supports parallel Agent execution, managing isolated workspaces based on git worktrees via PowerShell scripts, with each workspace having its own branch, front-end and back-end port pair, and development service instance.
50%UnverifiedIn the Cursor environment on Windows, loop is essentially a PowerShell script, combined with a JSON containing the prompt and Notify on Output regex matching to capture signals.
50%