S3cur3Th1sSh1t/WinPwn

I am unable to get NTLM Hashes using Inveigh using WinPwn

开放

#44 创建于 2022年7月10日

 (5 条评论) (0 个反应) (0 位负责人)PowerShell (540 个派生)batch import
help wanted

仓库指标

星标
 (3,663 个星标)
PR 合并指标
 (PR 指标待抓取)

描述

I did check the directory but no file is created. Nothing that shows the ntlm hashes. I tried editing the invoke-Inveigh command with FileOutput -Disabled but still couldn't make it work. Are there any logs that I can share? I did see that the Inveigh module of WinPwn would open a new PS Script process but going through some earlier issues (posted in Github), I learned that AMSI bypass was not getting applied to Inveigh. So I assume that Inveigh loads and runs on the existing PS session but still I am unable to get the NTLM hashes. No output file in the Directory.

Any help would be greatly appreciated!

贡献者指南