PowerUpSQL icon indicating copy to clipboard operation
PowerUpSQL copied to clipboard

Invoke-SQLUncPathInjection without Inveigh

Open S3cur3Th1sSh1t opened this issue 4 years ago • 1 comments

Hey,

i just found out that Invoke-SQLUncPathInjection tries to load Inveigh every time via IEX from github. By executing this function on an engagement without internet connectivity the whole function is not usable because inveigh cannot be loaded. And the catch try catch block fails.

You could for example add another parameter for that function - ExternalCaptureIP - so that the function can be used in combination with another system and responder.py/ntlmrelayx.py.

Greetings

S3cur3Th1sSh1t avatar Sep 01 '20 09:09 S3cur3Th1sSh1t

Good idea, I’ll add that during the next round of updates. Thanks!

nullbind avatar Sep 01 '20 14:09 nullbind