Issue #43 - Adding Get-VaultCredentials

Displays Windows vault credential objects including cleartext web
credentials.

1 files changed, 2 insertions, 41 deletions

diff --git a/Exfiltration/Exfiltration.psd1 b/Exfiltration/Exfiltration.psd1
index 2a5a152..9d3ef00 100644
--- a/Exfiltration/Exfiltration.psd1
+++ b/Exfiltration/Exfiltration.psd1
@@ -24,38 +24,8 @@ Description = 'PowerSploit Exfiltration Module'
 # Minimum version of the Windows PowerShell engine required by this module

 PowerShellVersion = '2.0'

 

-# Name of the Windows PowerShell host required by this module

-# PowerShellHostName = ''

-

-# Minimum version of the Windows PowerShell host required by this module

-# PowerShellHostVersion = ''

-

-# Minimum version of the .NET Framework required by this module

-# DotNetFrameworkVersion = ''

-

-# Minimum version of the common language runtime (CLR) required by this module

-# CLRVersion = ''

-

-# Processor architecture (None, X86, Amd64) required by this module

-# ProcessorArchitecture = ''

-

-# Modules that must be imported into the global environment prior to importing this module

-# RequiredModules = @()

-

-# Assemblies that must be loaded prior to importing this module

-# RequiredAssemblies = @()

-

-# Script files (.ps1) that are run in the caller's environment prior to importing this module.

-# ScriptsToProcess = ''

-

-# Type files (.ps1xml) to be loaded when importing this module

-# TypesToProcess = @()

-

 # Format files (.ps1xml) to be loaded when importing this module

-# FormatsToProcess = @()

-

-# Modules to import as nested modules of the module specified in RootModule/ModuleToProcess

-# NestedModules = @()

+FormatsToProcess = 'Get-VaultCredentials.ps1xml'

 

 # Functions to export from this module

 FunctionsToExport = '*'

@@ -76,15 +46,6 @@ ModuleList = @(@{ModuleName = 'Exfiltration'; ModuleVersion = '1.0.0.0'; GUID =
 FileList = 'Exfiltration.psm1', 'Exfiltration.psd1', 'Get-TimedScreenshot.ps1', 'Out-Minidump.ps1',

            'Get-Keystrokes.ps1', 'Get-GPPPassword.ps1', 'Usage.md', 'Invoke-Mimikatz.ps1',

            'Invoke-NinjaCopy.ps1', 'Invoke-TokenManipulation.ps1', 'Invoke-CredentialInjection.ps1',

-           'VolumeShadowCopyTools.ps1'

-

-# Private data to pass to the module specified in RootModule/ModuleToProcess

-# PrivateData = ''

-

-# HelpInfo URI of this module

-# HelpInfoURI = ''

-

-# Default prefix for commands exported from this module. Override the default prefix using Import-Module -Prefix.

-# DefaultCommandPrefix = ''

+           'VolumeShadowCopyTools.ps1', 'Get-VaultCredentials.ps1', 'Get-VaultCredentials.ps1xml'

 

 }