Merge pull request #13 from giMini/master

SQLToolsPS.exe

LOLBins.md

@@ -79,6 +79,7 @@ If you are missing from the acknowledgement, please let me know (I did not forge
 [Rcsi.exe](OtherMSBinaries/Rcsi.md)     
 [Sqldumper.exe](OtherMSBinaries/Sqldumper.md)     
 [Sqlps.exe](OtherMSBinaries/Sqlps.md)  
+[SQLToolsPS.exe](OtherMSBinaries/SQLToolsPS.md)   
 [Te.exe](OtherMSBinaries/Te.md)     
 [Tracker.exe](OtherMSBinaries/Tracker.md)  
 [Vsjitdebugger.exe](OtherMSBinaries/Vsjitdebugger.md)  

OSBinaries/SQLToolsPS.md

@@ -0,0 +1,31 @@
+## SQLToolsPS.exe
+
+* Functions: Execute, evade logging
+
+```
+SQLToolsPS.exe -noprofile
+```
+
+Acknowledgements:
+* Pierre-Alexandre Braeken - @pabraeken
+
+Code sample:
+
+* Downloading & executing a file
+
+```
+C:\Users>"C:\Program Files (x86)\Microsoft SQL Server\130\Tools\Binn\SQLToolsPS.exe -noprofile -command Start-Process calc"
+```
+
+Resources:
+* https://twitter.com/pabraeken/status/993298228840992768
+
+Full path:
+```
+C:\Program files (x86)\Microsoft SQL Server\130\Tools\Binn\sqlps.exe
+```
+
+Notes:
+A Powershell host.
+
+