aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authormattifestation <mattgraeber@gmail.com>2013-11-18 06:30:19 -0500
committermattifestation <mattgraeber@gmail.com>2013-11-18 06:30:19 -0500
commit46baff5ef25ebdbdb7ac32f0c1f592dbd76e3245 (patch)
tree92d27516cbd99c7389325032438c24bb94ad9825
parent7de1dd6df78e9964d88610f8e37c5268770c32e0 (diff)
downloadPowerSploit-46baff5ef25ebdbdb7ac32f0c1f592dbd76e3245.tar.gz
PowerSploit-46baff5ef25ebdbdb7ac32f0c1f592dbd76e3245.zip
Added Inject-LogonCredentials to README
-rw-r--r--README.md4
1 files changed, 4 insertions, 0 deletions
diff --git a/README.md b/README.md
index bc96a24..004d4af 100644
--- a/README.md
+++ b/README.md
@@ -148,6 +148,10 @@ Locates single Byte AV signatures utilizing the same method as DSplit from "clas
Lists available logon tokens. Creates processes with other users logon tokens, and impersonates logon tokens in the current thread.
+#### `Inject-LogonCredentials`
+
+Create logons with clear-text credentials without triggering a suspicious Event ID 4648 (Explicit Credential Logon).
+
#### `Invoke-NinjaCopy`
Copies a file from an NTFS partitioned volume by reading the raw volume and parsing the NTFS structures.