diff options
author | mattifestation <mattgraeber@gmail.com> | 2013-11-18 06:30:19 -0500 |
---|---|---|
committer | mattifestation <mattgraeber@gmail.com> | 2013-11-18 06:30:19 -0500 |
commit | 46baff5ef25ebdbdb7ac32f0c1f592dbd76e3245 (patch) | |
tree | 92d27516cbd99c7389325032438c24bb94ad9825 /README.md | |
parent | 7de1dd6df78e9964d88610f8e37c5268770c32e0 (diff) | |
download | PowerSploit-46baff5ef25ebdbdb7ac32f0c1f592dbd76e3245.tar.gz PowerSploit-46baff5ef25ebdbdb7ac32f0c1f592dbd76e3245.zip |
Added Inject-LogonCredentials to README
Diffstat (limited to 'README.md')
-rw-r--r-- | README.md | 4 |
1 files changed, 4 insertions, 0 deletions
@@ -148,6 +148,10 @@ Locates single Byte AV signatures utilizing the same method as DSplit from "clas Lists available logon tokens. Creates processes with other users logon tokens, and impersonates logon tokens in the current thread. +#### `Inject-LogonCredentials` + +Create logons with clear-text credentials without triggering a suspicious Event ID 4648 (Explicit Credential Logon). + #### `Invoke-NinjaCopy` Copies a file from an NTFS partitioned volume by reading the raw volume and parsing the NTFS structures. |