Repository navigation
Feature request: run against specific host #23
Description
Activity
Thanks for the feedback and idea. I think this may go hand in hand with #20
The update I pushed to dev doesn't work. I believe there are protections in place that prevent non-domain joined hosts from accessing SYSVOL. I haven't found a solution yet for enumeration SYSVOL remotely even with credentials.
I wonder if you could do it with:
TrustedHost
Remote PSSession on desired target with credentials.
Invoke ScriptSentryReacted by Spencer AlessiI don't know how I missed this comment. Interesting idea, I will have to try it sometime. Thanks Sam! 👍
PR #28 added
-Serverand-Domainfor targeting a specific domain controller. It does not create or route traffic through a SOCKS proxy, so I am leaving this issue open for the SOCKS transport portion.
I would love the option to run it against a specific host by (e.g point it to a DC to scan), I don’t want to run powershell via the C2, I would like to use it via SOCSK.