Merge pull request #15 from clymb3r/master

Adding GitIgnore, adding Invoke-NinjaCopy and Invoke-Mimikatz

1 files changed, 33 insertions, 0 deletions

diff --git a/Exfiltration/mimikatz-1.0/modules/mod_minidump.h b/Exfiltration/mimikatz-1.0/modules/mod_minidump.h
new file mode 100644
index 0000000..4247ab0
--- /dev/null
+++ b/Exfiltration/mimikatz-1.0/modules/mod_minidump.h
@@ -0,0 +1,33 @@
+/*	Benjamin DELPY `gentilkiwi`
+	http://blog.gentilkiwi.com
+	benjamin@gentilkiwi.com
+	Licence : http://creativecommons.org/licenses/by/3.0/fr/
+*/
+#pragma once
+#include "globdefs.h"
+#include <dbghelp.h>
+#include "mod_text.h"
+
+class mod_minidump
+{
+private:
+	HANDLE monFichier, monFileMapping;
+	LPVOID mesDonnees;
+
+public:
+	mod_minidump();
+	virtual ~mod_minidump(void);
+
+	LPVOID RVAtoPTR(RVA monRVA);
+	bool open(wchar_t * filename);
+	LPVOID getStream(MINIDUMP_STREAM_TYPE type);
+
+	PMINIDUMP_MODULE getMinidumpModule(wstring & nomModule);
+	bool getStreamsVector(vector<PMINIDUMP_DIRECTORY> * monVecteur);
+	MINIDUMP_TYPE getFlags();
+	bool FlagsToStrings(vector<wstring> * monVecteur);
+
+
+	static wstring StreamTypeToString(MINIDUMP_STREAM_TYPE monType);
+	static bool FlagsToStrings(MINIDUMP_TYPE Flags, vector<wstring> * monVecteur);
+};