search

NetSPI / PowerUpSQL

PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server
Other
2.47k stars 462 forks source link

Invoke-SQLUncPathInjection without Inveigh #65

Open S3cur3Th1sSh1t opened 4 years ago

S3cur3Th1sSh1t commented 4 years ago

Hey,

i just found out that Invoke-SQLUncPathInjection tries to load Inveigh every time via IEX from github. By executing this function on an engagement without internet connectivity the whole function is not usable because inveigh cannot be loaded. And the catch try catch block fails.

You could for example add another parameter for that function - ExternalCaptureIP - so that the function can be used in combination with another system and responder.py/ntlmrelayx.py.

Greetings

nullbind commented 4 years ago

Good idea, I’ll add that during the next round of updates. Thanks!