From 3e7f4d381b15b28ade2c32b14c72f224a8ac6b17 Mon Sep 17 00:00:00 2001 From: Kevin Robertson Date: Sun, 12 Jul 2015 22:32:41 -0400 Subject: Added HTTPS listener HTTPS captures can now be enabled. The default setting is disabled. Note that if HTTPS is enabled, the cert file needs to be in the same directory as the script. The cert will be installed in the local machine certificate store and bound to port 443. The script should remove the cert from the store and delete the binding on exit. If needed, see HTTPS parameter comments in the script or execute "Get-help .\Inveigh.ps1 -parameter https" for manual cert cleanup instructions. --- Inveigh.ps1 | Bin 61386 -> 66622 bytes TODO.md | 2 +- inveigh.pfx | Bin 0 -> 2550 bytes 3 files changed, 1 insertion(+), 1 deletion(-) create mode 100644 inveigh.pfx diff --git a/Inveigh.ps1 b/Inveigh.ps1 index 8356ba7..7023019 100644 Binary files a/Inveigh.ps1 and b/Inveigh.ps1 differ diff --git a/TODO.md b/TODO.md index d201dba..f137a8c 100644 --- a/TODO.md +++ b/TODO.md @@ -4,7 +4,7 @@ - [x] Add ability to capture NTLMv1 challenge/responses - [ ] Add ability to capture LM challenge/responses - [x] Add HTTP for challenge/response captures -- [ ] Add HTTPS for challenge/response captures +- [x] Add HTTPS for challenge/response captures - [x] Add Get-Help style comments - [ ] Add SMB listener - [ ] Add exfiltration method for captures diff --git a/inveigh.pfx b/inveigh.pfx new file mode 100644 index 0000000..5fa7503 Binary files /dev/null and b/inveigh.pfx differ -- cgit v1.2.3