Unmanaged PowerShell - PowerShell without powershell.exe

This video demonstrates the unmanaged PowerShell features in Cobalt Strike's Beacon payload. The powerpick command lets you run powershell scripts without powershell.exe. The psinject command lets you inject a PowerShell instance + script into a specific process. The original POC: https://github.com/leechristensen/UnmanagedPowerShell Justin Warner's post on PowerPick and ReflectivePick: https://www.sixdub.net/?p=367 Beacon: https://www.cobaltstrike.com/help-beacon