Powershell

Powershell is an extension to the command prompt, and provides more control over commands.

about_Execution_Policies - PowerShellMicrosoftLearn

about_PowerShell_exe - PowerShellMicrosoftLearn

Common options

1. Execution policies

PowerShell's execution policy is a safety feature that controls the conditions under which PowerShell loads configuration files and runs scripts. This feature helps prevent the execution of malicious scripts.

C:\> powershell -ep Bypass
C:\> powershell -ex Bypass
C:\> powershell -ExecutionPolicy Bypass 

• Bypass

  • Nothing is blocked and there are no warnings or prompts

  • This execution policy is designed for configurations in which a PowerShell script is built into a larger application or for configurations in which PowerShell is the foundation for a program that has its own security model

Depending on the current execution policy (eg. AllSigned or Restricted), we may not be able to load or run a module (eg. PowerView.ps1) to perform any relevant tasks. However with the Bypass option, we are able to bypass these restrictions to execute any script of our choice.

Example

We want to import the PowerView.ps1 module:

C:\> powershell -ep Bypass
PS> Import-Module PowerView.ps1