Skip to content

Ransomware simulation script written in PowerShell. Useful for testing your defenses and backups against real ransomware-like activity in a controlled setting.

License

lawndoc/RanSim

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

22 Commits
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Logo

Description

RanSim is a ransomware simulation script written in PowerShell. It recurisively encrypts files in the target directory using 256-bit AES encryption. RanSim has no self-spreading capabilities and will only run on the system you execute it on.

You can use RanSim to test your defenses and backups against real ransomware-like activity in a controlled setting. The same script can be used to decrypt the files if needed.

Usage

Encrypt

.\RanSim.ps1 -Mode encrypt

Decrypt

.\RanSim.ps1 -Mode decrypt

Optional Parameters and Defaults

-TargetPath -> C:\RanSim

-Extension -> .encrypted

-Key -> Q5KyUru6wn82hlY9k8xUjJOPIC9da41jgRkpt21jo2L=

Other Global Variables

TargetFiles -> .pdf .xls* .ppt* .doc* .accd* .rtf .txt .csv .jpg .jpeg .png .gif .avi .midi .mov mp3 .mp4 .mpeg .mpeg2 .mpeg3 .mpg .ogg

Credits

The author of the FileCryptography.psm1 is Tyler Siegrist, and he is also credited in the module's docstring.

About

Ransomware simulation script written in PowerShell. Useful for testing your defenses and backups against real ransomware-like activity in a controlled setting.

Topics

Resources

License

Stars

Watchers

Forks

Sponsor this project