WebJEA VS PS2EXE

WebJEA

Webjea https://github.com/markdomansky/WebJEA Use that on a non-dc.

WebJEA is exactly what you're looking for. Give users privileged access to PowerShell scripts in a GUI. https://github.com/markdomansky/WebJEA

I’ve been looking into something similar. I’ve come across WebJEA a few times. Looks like the best bet if you want a web UI.

Another one, purely web based, and free is WebJEA. You get web interface for powershell scripts, IIS is used. The link https://github.com/markdomansky/WebJEA.

Be sure to also check out WebJEA. https://github.com/markdomansky/WebJEA We use this in our org for exactly the reasons you mention. Only thing is it’s not really interactive. You can get creative with the use of script parameters to capture the input you need though, and they have some good examples and templates to work from.

So I've read the issue thread here: https://github.com/markdomansky/WebJEA/issues/4

markdomansky/WebJEA: WebJEA - Secure Self Service Web Forms from PowerShell Scripts (github.com) (DEMO)

If you have powershell scripts for your Users you can also try ps2exe. https://github.com/MScholtes/PS2EXE

PS2EXE -- This is what I've used in the past to create a exe from a PS script. Would suggest reading the readme on Github to understand the possible behavior changes while using it.

Something like using this: https://github.com/MScholtes/PS2EXE Although I'm sure there are other utilities out there that do something similar. It's not 100% absolutely secure, because I'm pretty sure that .exe can be de-compiled and read, but at least the password wouldn't be in a .log file (if passed as a parameter), nor clearly in a downloaded {random guid}.ps1 in the CM folder.

PS2EXE

To run with PowerShell save this to a text file with a .ps1 extension. Then right click and run with PowerShell. Orrrr...how I did it is I converted the .ps1 to .exe using ps2exe here https://github.com/MScholtes/PS2EXE/blob/master/README.md. Then just run the exe and just a black terminal screen shows up blank and script runs in the background. To stop the script just close out the black terminal screen. The exe way is better if someone monitors your screen from time to time because it doesn't show what's really going on.

As for how: Been using ps2exe for small app for a client. It's ok, but that's when you already got a script and wanna pack it into exe: https://github.com/MScholtes/PS2EXE

Right from the README.MD...

Yes and no. Maybe this theoretical miner would stop mining to drop GPU usage but who knows what else it's doing or data it's exfiltrating. I at one point (for fun) wrote a key-logger entirely in PowerShell and was wrapped as an executable and ran under the name "Windows Software Update" or something like that... it was a long time ago. The process itself would still be there but malware can be pretty good about disguising itself as other things. Keep in mind what I said about looking for the taskmgr process is probably the most basic way to do this. If someone is writing a legitimate sophisticated malware they're probably not writing it in as a simple .NET FX console app and you're better off just nuking your system and starting fresh.