## File Operations ![[Miscellaneous File Transfers#PowerShell Session File Transfer]] ![[Windows File Transfers#FTP]] ## Encode/Decode ![[Windows File Transfers#Base64]] ## Upload ![[Windows File Transfers#Web Uploads]] ## Dump LSASS ![[Attacking LSASS#Creating lsass.dmp using PowerShell]] ```powershell Get-ChildItem \\192.168.220.129\Finance\ ``` ```powershell New-PSDrive -Name "N" -Root "\\192.168.220.129\Finance" -PSProvider "FileSystem" ``` ```powershell $secpassword = ConvertTo-SecureString $password -AsPlainText -Force $cred = New-Object System.Management.Automation.PSCredential $username, $secpassword ``` ```powershell Get-ChildItem -Recurse -Path N:\ | Select-String "cred" -List ``` ## Scripts [[Powershell Payloads#Invoke-PowerShellTcp]] [[Protected File Transfers#Invoke-AESEncryption.ps1]]