You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I would love the option to run it against a specific host by (e.g point it to a DC to scan), I don’t want to run powershell via the C2, I would like to use it via SOCSK.
Hey @N7WEra do you want to try the latest version I pushed to dev? Trying to get ScriptSentry to work from a non-domain joined computer. Let me know if you run it and if you run into any issues. And if you do try it, I appreciate it!!
The update I pushed to dev doesn't work. I believe there are protections in place that prevent non-domain joined hosts from accessing SYSVOL. I haven't found a solution yet for enumeration SYSVOL remotely even with credentials.
PR #28 added -Server and -Domain for targeting a specific domain controller. It does not create or route traffic through a SOCKS proxy, so I am leaving this issue open for the SOCKS transport portion.
Activity
techspence commentedon Nov 10, 2024
Thanks for the feedback and idea. I think this may go hand in hand with #20
techspence commentedon Nov 11, 2024
Hey @N7WEra do you want to try the latest version I pushed to dev? Trying to get ScriptSentry to work from a non-domain joined computer. Let me know if you run it and if you run into any issues. And if you do try it, I appreciate it!!
techspence commentedon Dec 20, 2024
The update I pushed to dev doesn't work. I believe there are protections in place that prevent non-domain joined hosts from accessing SYSVOL. I haven't found a solution yet for enumeration SYSVOL remotely even with credentials.
SamErde commentedon Dec 20, 2024
I wonder if you could do it with:
TrustedHost
Remote PSSession on desired target with credentials.
Invoke ScriptSentry
techspence commentedon Jan 21, 2025
I don't know how I missed this comment. Interesting idea, I will have to try it sometime. Thanks Sam! 👍
techspence commentedon Sep 17, 2026
PR #28 added
-Serverand-Domainfor targeting a specific domain controller. It does not create or route traffic through a SOCKS proxy, so I am leaving this issue open for the SOCKS transport portion.