Invoker is a penetration testing utility. The goal is to use this tool when access to some Windows OS features through GUI is restricted.
Some features require administrative privileges.
Capabilities
Built with Dev-C++ IDE v5.11 (64 bit), compiled with TDM-GCC v4.9.2 (64 bit) and tested on Windows 10 Enterprise OS (64 bit). Download Dev-C++ from here.
Made for educational purposes. I hope it will help!
Invoker Library
Check all the capabilities here. Feel free to use the library.
PowerShell Scripts
Check all the PowerShell scripts used in the main C++ program here.
How to Run?
Run ‘\exec\Invoker.exe’.
Bytecode Injection
Elevate privileges by injecting bytecode into a higher-privileged process.
This tool can parse an HTTP response and extract the payload from a custom element, i.e. from <img class="bc" src="data:image/gif;base64,payload" alt="bc" hidden="hidden">
where payload
is a binary code/file encoded in Base64.
This might be useful if antivirus is constantly deleting your local payloads.
You can also specify your own custom element but you will have to modify the program source code and recompile it.
Check an example at pastebin.com/raw/Nd1tCBv6.
Bytecode provided will most certainly not work for you.
Generate a Reverse Shell Payload
Find out how to generate a reverse shell payload from my other project.
Get the LocalSystem Account (NT AUTHORITY\SYSTEM)
whoami
, you should now see nt authority\system
.Images
Pystinger is a Python-based tool that enables SOCKS4 proxying and port mapping through webshells. It…
Introduction When it comes to cybersecurity, speed and privacy are critical. Public vulnerability databases like…
Introduction When it comes to cybersecurity, speed and privacy are critical. Public vulnerability databases like…
If you are working with Linux or writing bash scripts, one of the most common…
What is a bash case statement? A bash case statement is a way to control…
Why Do We Check Files in Bash? When writing a Bash script, you often work…