[v4p3]

I just wanted to post this here as it's a useful tool for post exploitation :)

http://www.powershellempire.com/

https://github.com/PowerShellEmpire/Empire

The framework allows the use of powershell agents without the need of powershell.exe :)

Credits to harmj0y, sixdub, and enigma0x3.

[p4r4n0id]

What do u mean by "without the need of powershell.exe" ? PS process is executed by the installer and also by all agents.....

[Munsta]

What do u mean by "without the need of powershell.exe" ? PS process is executed by the installer and also by all agents.....

You can but you need another C#.exe that references the PS System.Automation.dll assembly and does what powershell.exe is doing anyway - pointless if we talk about anti-DFIR.