aboutsummaryrefslogtreecommitdiff
path: root/README.md
diff options
context:
space:
mode:
authormattifestation <mattgraeber@gmail.com>2013-11-18 06:30:19 -0500
committermattifestation <mattgraeber@gmail.com>2013-11-18 06:30:19 -0500
commit46baff5ef25ebdbdb7ac32f0c1f592dbd76e3245 (patch)
tree92d27516cbd99c7389325032438c24bb94ad9825 /README.md
parent7de1dd6df78e9964d88610f8e37c5268770c32e0 (diff)
downloadPowerSploit-46baff5ef25ebdbdb7ac32f0c1f592dbd76e3245.tar.gz
PowerSploit-46baff5ef25ebdbdb7ac32f0c1f592dbd76e3245.zip
Added Inject-LogonCredentials to README
Diffstat (limited to 'README.md')
-rw-r--r--README.md4
1 files changed, 4 insertions, 0 deletions
diff --git a/README.md b/README.md
index bc96a24..004d4af 100644
--- a/README.md
+++ b/README.md
@@ -148,6 +148,10 @@ Locates single Byte AV signatures utilizing the same method as DSplit from "clas
Lists available logon tokens. Creates processes with other users logon tokens, and impersonates logon tokens in the current thread.
+#### `Inject-LogonCredentials`
+
+Create logons with clear-text credentials without triggering a suspicious Event ID 4648 (Explicit Credential Logon).
+
#### `Invoke-NinjaCopy`
Copies a file from an NTFS partitioned volume by reading the raw volume and parsing the NTFS structures.