ScriptSentry Feature request: run against specific host

I would love the option to run it against a specific host by (e.g point it to a DC to scan), I don’t want to run powershell via the C2, I would like to use it via SOCSK.

Nov 09 '24 16:11 N7WEra

Thanks for the feedback and idea. I think this may go hand in hand with https://github.com/techspence/ScriptSentry/issues/20

Nov 10 '24 20:11 techspence

Hey @N7WEra do you want to try the latest version I pushed to dev? Trying to get ScriptSentry to work from a non-domain joined computer. Let me know if you run it and if you run into any issues. And if you do try it, I appreciate it!!

Nov 11 '24 04:11 techspence

The update I pushed to dev doesn't work. I believe there are protections in place that prevent non-domain joined hosts from accessing SYSVOL. I haven't found a solution yet for enumeration SYSVOL remotely even with credentials.

Dec 20 '24 16:12 techspence

I wonder if you could do it with:

TrustedHost Remote PSSession on desired target with credentials. Invoke ScriptSentry

Dec 20 '24 17:12 SamErde

I don't know how I missed this comment. Interesting idea, I will have to try it sometime. Thanks Sam! 👍

Jan 21 '25 14:01 techspence