diff options
| author | bitform <matt@exploit-monday.com> | 2013-01-15 18:53:33 -0500 |
|---|---|---|
| committer | bitform <matt@exploit-monday.com> | 2013-01-15 18:53:33 -0500 |
| commit | ce10e8d317e3ce06fdd3e4068724890b477be733 (patch) | |
| tree | 042ccd89fef84169197491478664acd68619d927 | |
| parent | 66c69286f94116e6c8779a958a32017d3fcd7f80 (diff) | |
| download | PowerSploit-ce10e8d317e3ce06fdd3e4068724890b477be733.tar.gz PowerSploit-ce10e8d317e3ce06fdd3e4068724890b477be733.zip | |
Added Get-TimedScreenshot
A function that takes screenshots at a regular interval and saves them
to a folder.
Developed by @obscuresec
| -rw-r--r-- | Get-TimedScreenshot.ps1 | 99 | ||||
| -rw-r--r-- | README | 4 |
2 files changed, 103 insertions, 0 deletions
diff --git a/Get-TimedScreenshot.ps1 b/Get-TimedScreenshot.ps1 new file mode 100644 index 0000000..3a19a7d --- /dev/null +++ b/Get-TimedScreenshot.ps1 @@ -0,0 +1,99 @@ +Function Get-TimedScreenshot {
+<#
+.SYNOPSIS
+
+ Get-TimedScreenshot
+
+ Author: Chris Campbell (@obscuresec)
+ License: BSD 3-Clause
+
+.DESCRIPTION
+
+ A function that takes screenshots and saves them to a folder.
+
+.PARAMETER $Path
+
+ Specifies the folder path.
+
+.PARAMETER $Interval
+
+ Specifies the interval in seconds between taking screenshots.
+
+.PARAMETER $EndTime
+
+ Specifies when the script should stop running in the format HH-MM
+
+.EXAMPLE
+
+ PS C:\> Get-TimedScreenshot -Path c:\temp\ -Interval 30 -EndTime 14:00
+
+.LINK
+
+ http://obscuresecurity.blogspot.com/2013/01/Get-TimedScreenshot.html
+ https://github.com/obscuresec/random/blob/master/Get-TimedScreenshot
+
+#>
+
+ [CmdletBinding()] Param(
+ [Parameter(Mandatory=$True)]
+ [ValidateScript({Test-Path -Path $_ })]
+ [string] $Path,
+
+ [Parameter(Mandatory=$True)]
+ [int32] $Interval,
+
+ [Parameter(Mandatory=$True)]
+ [string] $EndTime
+ )
+
+ #Define helper function that generates and saves screenshot
+ Function GenScreenshot {
+ $ScreenBounds = [Windows.Forms.SystemInformation]::VirtualScreen
+ $ScreenshotObject = New-Object Drawing.Bitmap $ScreenBounds.Width, $ScreenBounds.Height
+ $DrawingGraphics = [Drawing.Graphics]::FromImage($ScreenshotObject)
+ $DrawingGraphics.CopyFromScreen( $ScreenBounds.Location, [Drawing.Point]::Empty, $ScreenBounds.Size)
+ $DrawingGraphics.Dispose()
+ $ScreenshotObject.Save($FilePath)
+ $ScreenshotObject.Dispose()
+ }
+
+ Try {
+
+ #load required assembly
+ Add-Type -Assembly System.Windows.Forms
+
+ Do {
+ #get the current time and build the filename from it
+ $Time = (Get-Date)
+
+ [string] $FileName = "$($Time.Month)"
+ $FileName += '-'
+ $FileName += "$($Time.Day)"
+ $FileName += '-'
+ $FileName += "$($Time.Year)"
+ $FileName += '-'
+ $FileName += "$($Time.Hour)"
+ $FileName += '-'
+ $FileName += "$($Time.Minute)"
+ $FileName += '-'
+ $FileName += "$($Time.Second)"
+ $FileName += '.png'
+
+ #use join-path to add path to filename
+ [string] $FilePath = (Join-Path $Path $FileName)
+
+ #run screenshot function
+ GenScreenshot
+
+ Write-Verbose "Saved screenshot to $FilePath. Sleeping for $Interval seconds"
+
+ Start-Sleep -Seconds $Interval
+ }
+
+ #note that this will run once regardless if the specified time as passed
+ While ((Get-Date -Format HH:%m) -lt $EndTime)
+ }
+
+ Catch {Write-Warning "$Error[0].ToString() + $Error[0].InvocationInfo.PositionMessage"}
+
+}
\ No newline at end of file @@ -32,6 +32,10 @@ Get-GPPPassword: Get-GPPPassword retrieves the plaintext password for accounts pushed through Group Policy in groups.xml.
+Get-TimedScreenshot:
+
+ A function that takes screenshots at a regular interval and saves them to a folder.
+
----------
.\PETools
----------
|