Xor

MetaCTF - PowerShell Obfuscation

A multi-layered PowerShell one-liner used string format tricks, base64 encoding, char arrays, and a rolling XOR cipher to hide a registry write command. Peeling back each layer statically revealed the full registry key.