Inveigh v2.0.11

Replaced .NET 7 with 8.
NTLM parsing fixes.

Inveigh v2.0.10

Removed .NET 6 builds.
Added .NET 7 and NativeAOT builds.

Inveigh v2.0.9

Fixed bug with intervals
Enabled AAAA types in DNS

Inveigh v2.0.8

Fixed cleartext capture/output
Added proxyauth reconnect delay
Changed IgnoreHosts/ReplyToHosts to IgnoreQueries/ReplyToQueries

Inveigh v2.0.7

Proxy auth capture fix
Added Costura.Fody

Dev Branch Debug Builds

Latest dev branch debug builds (2ff2760)

Inveigh v2.0.6

bug fixes:
high CPU usage with sniffer
ICMPv6 socket graceful exit
NTLMv2 parsing issue

Inveigh v2.0.5

bug fixes
switched .net 4.5 to 4.6.2
switched .net 5.0 to 6.0
added workflow for release assemblies

2.0

Rebuilt for C#
Cross-platform (Windows, Linux, macOS)
New listeners (SMB, LDAP, WebDAV, HTTPS)
Improved interactive console (tab complete, real time stats)

1.5

Inveigh.ps1

• Added privileged and unprivileged DNS spoofer capable of answering incoming DNS requests.
• New ADIDNS attack called NS that can add an NS record to direct DNS requests to Inveigh host. Using this with WPAD can bypass the global query block list (GQBL). https://blog.netspi.com/adidns-revisited/
• Pcap TCP and UDP output.
• New packet sniffing output including incoming SYN packets, kerberos auth negotiation, null responses, local DNS requests.
• Kerberos kirbi output for unconstrained delegation attacks. - https://blog.netspi.com/machineaccountquota-is-useful-sometimes/