From 81cc62a5449d1501d2e9ec0e52466a5799343f13 Mon Sep 17 00:00:00 2001 From: Kevin Robertson Date: Sun, 13 Sep 2015 15:44:44 -0400 Subject: SMB relay added, runspace changes This version contains the first pass at SMB relay. It will currently relay HTTP/HTTPS NTLMv2 to SMB. It will perform a psexec style, command only (no file upload) execution. It will attempt to delete the temp service after the service is started. Launching shells directly through the command may delay or prevent the service deletion. In the event that manual deletion is needed, the display name of the added service is IVSRV plus some random characters. The error/status checking needs a lot of work. The current messages cannot be completely trusted. The spoofer/sniffer loop has been placed in a runspace to permit interaction with the console while Inveigh is running. Pressing enter will now bring up a prompt. In addition to ctrl+c, Inveigh can be exited using the quit command. Avoid using ctrl+c while the prompt is open since it will bypass the shutdown function. --- Inveigh.ps1 | Bin 73010 -> 165966 bytes 1 file changed, 0 insertions(+), 0 deletions(-) (limited to 'Inveigh.ps1') diff --git a/Inveigh.ps1 b/Inveigh.ps1 index 436d505..8c80b7d 100644 Binary files a/Inveigh.ps1 and b/Inveigh.ps1 differ -- cgit v1.2.3