Removed mimikatz.

This doesn't need to reside in PowerSploit. Those that are truly
paranoid should validate that the embedded executable in
Invoke-Mimikatz.ps1 is indeed mimikatz.

This was causing AV to flag upon downloading PowerSploit.

1 files changed, 0 insertions, 24 deletions

diff --git a/Exfiltration/mimikatz-1.0/modules/mod_cryptong.h b/Exfiltration/mimikatz-1.0/modules/mod_cryptong.h
deleted file mode 100644
index 3eec5b6..0000000
--- a/Exfiltration/mimikatz-1.0/modules/mod_cryptong.h
+++ /dev/null
@@ -1,24 +0,0 @@
-/*	Benjamin DELPY `gentilkiwi`
-	http://blog.gentilkiwi.com
-	benjamin@gentilkiwi.com
-	Licence : http://creativecommons.org/licenses/by/3.0/fr/
-*/
-#pragma once
-#include "globdefs.h"
-#include <bcrypt.h>
-#include <sstream>
-
-class mod_cryptong /* Ref : http://msdn.microsoft.com/en-us/library/aa376210.aspx */
-{
-public:
-	static bool getVectorProviders(vector<wstring> * monVectorProviders);
-	static bool getVectorContainers(vector<wstring> * monVectorContainers, bool isMachine = false);
-	static bool getHKeyFromName(wstring keyName, NCRYPT_KEY_HANDLE * keyHandle, bool isMachine = false);
-	static bool getKeySize(HCRYPTPROV_OR_NCRYPT_KEY_HANDLE * provOrCle, DWORD * keySize);
-	static bool isKeyExportable(HCRYPTPROV_OR_NCRYPT_KEY_HANDLE * provOrCle, bool * isExportable);
-	static bool getPrivateKey(NCRYPT_KEY_HANDLE maCle, PBYTE * monExport, DWORD * tailleExport, LPCWSTR pszBlobType = LEGACY_RSAPRIVATE_BLOB);
-	static bool NCryptFreeObject(NCRYPT_HANDLE hObject);
-
-	static bool isNcrypt;
-	static bool justInitCNG(LPCWSTR pszProviderName = NULL);
-};