0

I was trying Invoke-ReflectivePEInjection by doing

.\Convert-BinaryToString
Convert-BinaryToString C:\file.exe
$InputString="base64string"
$PEBytes=[System.Convert]::FromBase64String($InputString)

But when I run

Invoke-ReflectivePEInjection -PEBytes $PEBytes

I get 

Invoke-ReflectivePEInjection : The term 'Invoke-ReflectivePEInjection' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again.
At line:1 char:1
+ Invoke-ReflectivePEInjection -PEBytes $PEBytes
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : ObjectNotFound: (Invoke-ReflectivePEInjection:String) [], CommandNotFoundException
    + FullyQualifiedErrorId : CommandNotFoundException

What can be the reason?

schroeder
  • 129,372
  • 55
  • 299
  • 340
ampf27
  • 3
  • 1
  • 3

1 Answers1

0

It's part of PowerSploit, which you need to install:

Install-Module -Name PowerSploit

If you've already installed it, you need to import it into your scope using

Import-Module PowerSploit

If you need it regularly, add the above in your $profile script.

msanford
  • 815
  • 1
  • 9
  • 26