diff options
| author | mattifestation <mattgraeber@gmail.com> | 2013-10-01 17:41:54 -0400 |
|---|---|---|
| committer | mattifestation <mattgraeber@gmail.com> | 2013-10-01 17:41:54 -0400 |
| commit | 70a3a43f24006a6cddd62dcb181efc860f3de22c (patch) | |
| tree | 7945d72ea2a917f2092f4afeb28f18246755b55a /README.md | |
| parent | 6ad050fe7a54ae7c47fda4505043df8efd82bc2e (diff) | |
| download | PowerSploit-70a3a43f24006a6cddd62dcb181efc860f3de22c.tar.gz PowerSploit-70a3a43f24006a6cddd62dcb181efc860f3de22c.zip | |
Added exfil script synopses to README.md
Descriptions for Invoke-NinjaCopy and Invoke-Mimikatz were added to the
readme.
Diffstat (limited to 'README.md')
| -rw-r--r-- | README.md | 8 |
1 files changed, 8 insertions, 0 deletions
@@ -144,6 +144,14 @@ Locates single Byte AV signatures utilizing the same method as DSplit from "clas **All your data belong to me!** +#### `Invoke-NinjaCopy` + +Copies a file from an NTFS partitioned volume by reading the raw volume and parsing the NTFS structures. + +#### `Invoke-Mimikatz` + +Reflectively loads Mimikatz 1.0 in memory using PowerShell. Can be used to dump credentials without writing anything to disk. Can be used for any functionality provided with Mimikatz. + #### `Get-Keystrokes` Logs keys pressed, time and the active window. |