Invoker - Penetration testing utility for the security community.

Invoker is a penetration testing utility for the security community. The goal is to use this tool when access to some Windows OS features through GUI is restricted. Some features require administrative privileges.

Capabilities:

invoke the Command Prompt and PowerShell,
download a file,
add a registry key,
schedule a task,
connect to a remote host,
terminate a running process,
run a new process,
inject bytecode into a running process,
inject DLL into a running process,
enable access token privileges,
duplicate access token of a running process,
list unquoted service paths and restart a running service,
replace Sticky Keys.

Built with Dev-C++ IDE v5.11 (64 bit), compiled with TDM-GCC v4.9.2 (64 bit) and tested on Windows 10 Enterprise OS (64 bit). Download Dev-C++ from here.

Made for educational purposes. I hope it will help!

Invoker Library

Check all the capabilities here. Feel free to use the library.

PowerShell Scripts

Check all the PowerShell scripts used in the main C++ program here.

How to Run

Run '\exec\Invoker.exe'.

Bytecode Injection

Read the rest of this story with a free account.

Already have an account? Sign in

Author

Hakin9 TEAM: Hakin9 is a monthly magazine dedicated to hacking and cybersecurity. In every edition, we try to focus on different approaches to show various techniques - defensive and offensive. This knowledge will help you understand how most popular attacks are performed and how to protect your data from them. Our tutorials, case studies and online courses will prepare you for the upcoming, potential threats in the cyber security world. We collaborate with many individuals and universities and public institutions, but also with companies such as Xento Systems, CATO Networks, EY, CIPHER Intelligence LAB, redBorder, TSG, and others.