diff options
author | Kevin Robertson <robertsonk@gmail.com> | 2015-04-18 11:52:14 -0400 |
---|---|---|
committer | Kevin Robertson <robertsonk@gmail.com> | 2015-04-18 11:52:14 -0400 |
commit | 49b3badcd3fdf6b5fe7a337f8468f1fec493fe89 (patch) | |
tree | 430b85905186801532f149d881879e87694d9b19 /README.md | |
parent | 72a482040c27b3da8de1ba8470db477b595fea10 (diff) | |
parent | 2810aae197d09836df95f676b9e47d354849499a (diff) | |
download | Inveigh-49b3badcd3fdf6b5fe7a337f8468f1fec493fe89.tar.gz Inveigh-49b3badcd3fdf6b5fe7a337f8468f1fec493fe89.zip |
Merge remote-tracking branch 'origin/master'
Conflicts:
Inveigh.ps1
Diffstat (limited to 'README.md')
-rw-r--r-- | README.md | 21 |
1 files changed, 21 insertions, 0 deletions
diff --git a/README.md b/README.md new file mode 100644 index 0000000..441f9f5 --- /dev/null +++ b/README.md @@ -0,0 +1,21 @@ +# Inveigh +Inveigh is a PowerShell LLMNR/NBNS spoofer designed to assist penetration testers that find themselves restricted to a Windows system. This can commonly occur while performing phishing attacks, USB attacks, VLAN pivoting, or even restrictions from the client. + +# Notes +1. Currently supports IPv4 LLMNR/NBNS spoofing and HTTP/SMB NTLMv1/NTLMv2 challenge/response capture. +2. LLMNR/NBNS spoofing is performed through sniffing and sending with raw sockets. +3. SMB captures are performed through sniffing. +4. HTTP captures are performed with a listener. +5. The local LLMNR/NBNS services do not need to be disabled on the client system. +6. LLMNR/NBNS spoofer will point victims to host system's SMB service, keep account lockout scenarios in mind. +7. Ensure that the LMMNR,NBNS,SMB,HTTP ports are open within any local firewall. +8. Output files will be created in current working directory. +9. If you copy/paste challenge/response captures from output window for password cracking, remove carriage returns. +10. Code is proof of concept level and may not work under some scenarios. + +# Usage +With default settings +Inveigh.ps1 -i localip + +With features enabled/disabled +Inveigh.ps1 -i localip -LLMNR Y/N -NBNS Y/N -HTTP Y/N -SMB Y/N |