Unmanaged PowerShell - PowerShell without powershell.exe
This video demonstrates the unmanaged PowerShell features in Cobalt Strike's Beacon payload. The powerpick command lets you run powershell scripts without powershell.exe. The psinject command lets you inject a PowerShell instance + script into a specific process.
The original POC:
https://github.com/leechristensen/Unm...
Justin Warner's post on PowerPick and ReflectivePick:
https://www.sixdub.net/?p=367
Beacon:
https://www.cobaltstrike.com/help-beacon