Ares-mythic/documentation-payload/ares/commands/powerpick.md at b88b3a218456c39e6473c906213df5b3d2b565c1

mirror of https://github.com/Aryma-f4/Ares-mythic.git synced 2026-06-12 22:54:11 +00:00

Files

Aryma 03d283cf49 refactor(payload): rename apollo to ares and update documentation

This commit renames the Apollo payload type to Ares, moving all associated files and updating documentation accordingly. The change includes:
- Renaming directories from `apollo` to `ares`
- Updating documentation image references
- Maintaining the same code functionality while changing the payload name
- Adding new Ares-specific documentation files
- Removing old Apollo documentation files

The rename is done to reflect the new payload name while preserving all existing functionality.

2026-04-14 14:02:44 +07:00

588 B

Raw Blame History

+++ title = "powerpick" chapter = false weight = 103 hidden = false +++

{{% notice info %}} Artifacts Generated: Process Create, Process Inject, Process Kill {{% /notice %}}

Summary

Execute PowerShell commands as post-exploitation job. This command will import the most recently registered *.ps1 file registered using register_file and import it into the PowerShell runspace before execution.

Arguments (Positional)

command

PowerShell command to be executed.

Usage

powerpick [command]
powerpick -Command [command]

MITRE ATT&CK Mapping

T1059
T1562

588 B Raw Blame History