trinitor/DetectionLab
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Fixing working in choco and redteam

Browse Source
This commit is contained in:
Chris Long
2019-03-01 22:51:26 -08:00
parent c732ba6908
commit ebdaa07080
2 changed files with 9 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
Vagrant/scripts/install-choco-extras.ps1
View File

@@ -1,5 +1,7 @@
# Purpose: Install additional packages from Chocolatey. # Purpose: Install additional packages from Chocolatey.
Write-Host "Installing additional Choco packages..."
If (-not (Test-Path "C:\ProgramData\chocolatey")) { If (-not (Test-Path "C:\ProgramData\chocolatey")) {
Write-Host "Installing Chocolatey" Write-Host "Installing Chocolatey"
iex ((new-object net.webclient).DownloadString('https://chocolatey.org/install.ps1')) iex ((new-object net.webclient).DownloadString('https://chocolatey.org/install.ps1'))
@@ -11,4 +13,4 @@ Write-Host "Installing Chocolatey extras..."
choco install -y wireshark choco install -y wireshark
choco install -y microsoft-message-analyzer choco install -y microsoft-message-analyzer
Write-Host "Utilties installation complete!" Write-Host "Choco addons complete!"

6
Vagrant/scripts/install-redteam.ps1
View File

@@ -1,5 +1,8 @@
# Purpose: Installs Mimikatz and Powersploit into c:\Tools\Mimikatz. Used to install redteam related tooling. # Purpose: Installs Mimikatz and Powersploit into c:\Tools\Mimikatz. Used to install redteam related tooling.
Write-Host "Installing Red Team Tooling..."
# Disable Windows Defender realtime scanning before downloading Mimikatz and drop the firewall # Disable Windows Defender realtime scanning before downloading Mimikatz and drop the firewall
If ($env:computername -eq "win10") { If ($env:computername -eq "win10") {
If (Test-Path "HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender") If (Test-Path "HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender")
@@ -7,6 +10,7 @@ If ($env:computername -eq "win10") {
Remove-Item "HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender" -Recurse -Force Remove-Item "HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender" -Recurse -Force
} }
gpupdate /force | Out-String gpupdate /force | Out-String
Write-Host "Disabling Windows Defender Realtime Monitoring..."
Set-MpPreference -ExclusionPath C:\commander.exe, C:\Tools Set-MpPreference -ExclusionPath C:\commander.exe, C:\Tools
set-MpPreference -DisableRealtimeMonitoring $true set-MpPreference -DisableRealtimeMonitoring $true
Set-NetFirewallProfile -Profile Domain,Public,Private -Enabled False Set-NetFirewallProfile -Profile Domain,Public,Private -Enabled False
@@ -42,3 +46,5 @@ if (-not (Test-Path $powersploitRepoPath)) {
} else { } else {
Write-Host "PowerSploit was already installed. Moving On." Write-Host "PowerSploit was already installed. Moving On."
} }
Write-Host "Red Team tooling installation complete!"