Nishang
Offensive PowerShell framework: in-memory reverse shells.
A collection of offensive PowerShell scripts. It includes in-memory reverse shells, downloaders and post-exploitation tools, widely used as an initial-access payload on Windows.
Family Access, shells & transfer
Flags Invoke-PowerShellTcp -Reverse
Cheatsheet Reverse shells
Installation
# PowerShell script framework (post-exploitation). Clone it and, on the target Windows,
# import the module or pull a single script into memory:
git clone https://github.com/samratashok/nishang
# on Windows: Import-Module .\nishang.psm1 (or dot-source the .ps1 you need)Useful commands
Appears in
Some machines where its use is documented; not an exhaustive list.