Comments (2)
I've tried to get this working as well and could not. I'm running as admin on the host with inveigh. NBNS and LLMBR requests are being received. I can capture hashes, but relay never works, no information from relay is output like in the example screenshots. The same attacks are working on Kali in the same environment with responder and responder-multirelay or ntlmrelayx.
I have imported invoke-thehash in powershell, and have tried playing with options such as lowering the repeat enumerate, increasing the failed login threshold (to 1000), and added Execute to the attack types. I'm trying this in a test environment where I have full control of all machines
I am using Inveigh in CommandoVM, Windows 10, Powershell version 5.1 with execution policy set to unrestricted. I also tried the dev branch without success. I checked invoke-relay module and there is no option for verbosity.
Is there any way to turn on some debugging or steps investigate further? I can provide screenshots and/or pcaps if necessary.
Cheers.
from inveigh.
@kimoppalfens Sorry, looks like I never responded. Did you sort this out? The biggest catch I've seen with running net user to add an account is not using a password that meets the target's password complexity requirements. Relay adds and executes the service but that command itself fails. If you can get a packet capture, check for the CreateServiceW SMB2 packet. You should be able to see your command in that packet.
@Freakazoidile You don't see any relay related output at all? Here are some things that might cause that:
- The Inveigh HTTP listener is running and not the Inveigh-Relay HTTP listener.
- You are seeing an SMB capture from the Inveigh packet sniffer. Inveigh only does HTTP to SMB relay and not SMB to SMB due to 445 being in use by Windows.
- You are targeting the same system that Inveigh-Relay is running on. This is doubtful though since you would still see some relay output messages.
Most of Inveigh runs in various runspaces and output is tricky. You can attach to the individual runspaces directly with runspace debugging. For the relay stuff, pcaps will generally give you a good idea what's going on.
from inveigh.
Related Issues (20)
- Inveigh won't capture hashes HOT 3
- Feature Request - WebDAV Support HOT 2
- Incorrect hash length for netntlmv2 captured hash HOT 4
- Exception Calling "Write" and "Read" After Successful Auth due to Conenction being Forcibly Closed By Remote Host HOT 2
- Feature Request LDAP Queries HOT 1
- relay to multiple targets? HOT 2
- Invoke- commands do not exist HOT 1
- Bug: ADIDNS doesn't work for the System partition.
- error building Inveigh 2.0 HOT 5
- Packet sniffing error detected - System.ArgumentException HOT 4
- Unprivileged spoofing with different IP address HOT 2
- Error running Inveigh.exe 4.5
- Unhandled Exception: System.ArgumentException: Invalid Parameter "LISTENERIP" HOT 4
- Cannot build project HOT 4
- NullReference Exception if IPv6 is disabled HOT 3
- not sure what to do? HOT 1
- Unable to recognize HOT 2
- Documentation is incorrect for "-FileOutput Default=Disabled:" HOT 1
- Defender marks it as "VirTool:MSIL/Denigrate.B!MTB" HOT 1
- Errors on invoke-inveigh HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from inveigh.