From 23d0f07ca1489b71c8f1fef9ef55aaa90a7aa0a9 Mon Sep 17 00:00:00 2001
From: Kevin Robertson <Kevin-Robertson@users.noreply.github.com>
Date: Sun, 12 Apr 2020 00:13:53 -0400
Subject: Proxy auth fix

https://github.com/Kevin-Robertson/Inveigh/issues/20
---
 Inveigh.ps1 | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/Inveigh.ps1 b/Inveigh.ps1
index e289e75..f1683b4 100644
--- a/Inveigh.ps1
+++ b/Inveigh.ps1
@@ -500,7 +500,7 @@ if($invalid_parameter)
     throw
 }
 
-$inveigh_version = "1.502"
+$inveigh_version = "1.503"
 
 if(!$IP)
 { 
@@ -2000,7 +2000,7 @@ $NTLM_functions_scriptblock =
         $NTLMSSP_hex_offset = $payload_converted.IndexOf("4E544C4D53535000")
         $session = "$SourceIP`:$SourcePort"
 
-        if(($Protocol -Like "HTTP*" -or $NTLMSSP_hex_offset -gt 0) -and $payload_converted.SubString(($NTLMSSP_hex_offset + 16),8) -eq "03000000")
+        if(($Protocol -Like "HTTP*" -or $Protocol -Like "Proxy"-or $NTLMSSP_hex_offset -gt 0) -and $payload_converted.SubString(($NTLMSSP_hex_offset + 16),8) -eq "03000000")
         {
             $NTLMSSP_offset = $NTLMSSP_hex_offset / 2
             $LM_length = Get-UInt16DataLength ($NTLMSSP_offset + 12) $Payload
-- 
cgit v1.2.3