aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2014-02-03Removed mimikatz.mattifestation289-16310/+0
This doesn't need to reside in PowerSploit. Those that are truly paranoid should validate that the embedded executable in Invoke-Mimikatz.ps1 is indeed mimikatz. This was causing AV to flag upon downloading PowerSploit.
2014-01-30Merge pull request #26 from obscuresec/masterMatt Graeber1-105/+130
Update Invoke-ReverseDnsLookup.ps1
2014-01-30Update Invoke-ReverseDnsLookup.ps1Chris Campbell1-105/+130
Added pipeline support and verbose statement.
2014-01-25Generate a non-terminating error if there's a binding/framework version mismatchmattifestation2-0/+5
The user should at least be made aware if they're using an unsupported framework library version.
2014-01-25Upgraded Capstone framework libs to 2.0mattifestation2-0/+0
These are the compiled libs straight from http://www.capstone-engine.org/download.html
2014-01-25Disable non-standard cmdlet verb checkingmattifestation1-1/+1
2014-01-19Capstone.dll returns the correct number of operands now.mattifestation1-0/+0
2014-01-19Capstone module now incorporates framework 2.0RC1mattifestation10-127/+176
* I also moved the contents of Get-CSDisassembly.ps1 into Capstone.psm1
2014-01-11Merge pull request #25 from clymb3r/masterMatt Graeber1-32/+142
Bug fixes for Invoke-TokenManipulation
2014-01-10Bug fixes for Invoke-TokenManipulationclymb3r1-32/+142
Processes could not be started when the script was being run from Session 0. The fix is to use the CreateProcessAsUserW function when running in Session 0. This API requires SeAssignPrimaryTokenPrivilege priviege, so for non-session0 calls I still use CreateProcessWithTokenW which does not require special privileges.
2014-01-04Updated usage documentationmattifestation1-2/+3
2014-01-04Updated C# Capstone binding to latest versionmattifestation1-0/+0
2014-01-01Fixes #23 - $Password was not being clearedmattifestation1-0/+1
2013-12-26Adding 64-bit lib filemattifestation2-1/+0
2013-12-26Major update to Capstone disassembly modulemattifestation4-16/+13
* Refactor of C# capstone binding * Now compatible in 32 and 64-bit PowerShell
2013-12-22Added Capstone Engine PowerShell bindingmattifestation10-0/+266
Consider this to be an alpha release until the C# binding is published.
2013-11-18Added Inject-LogonCredentials to READMEmattifestation1-0/+4
2013-11-18Merge pull request #21 from clymb3r/masterMatt Graeber18-1/+4428
Adding Inject-LogonCredentials
2013-11-17Adding Inject-LogonCredentialsclymb3r18-1/+4428
2013-11-13Normalized all scripts to ASCII encodingmattifestation58-91/+91
2013-11-07Get-ILDisassembly now accepts ConstructorInfo objectsmattifestation1-3/+4
2013-11-07Get-ILDisassembly now displays metadata tokens.mattifestation2-1/+9
* Having metadata tokens displayed in output helps with reverse engineering because you can pass metadata tokens to System.Reflection.Module.ResolveMember and then easily interact with the member in question. * I also fixed a bug when displaying integer constants. I wasn't doing an endian swap.
2013-11-04Merge pull request #19 from clymb3r/masterMatt Graeber1-2/+2
Updated Invoke-TokenManipulation help
2013-11-04Updated Invoke-TokenManipulation helpclymb3r1-2/+2
2013-11-04Added Invoke-TokenManipulation to README.mdmattifestation1-0/+4
2013-11-04Merge pull request #18 from clymb3r/masterMatt Graeber2-1/+1774
Adding Invoke-TokenManipulation
2013-11-03Adding Invoke-TokenManipulationclymb3r2-1/+1774
2013-11-03Fix for hostfiles option in powershell 2webstersprodigy1-2/+2
2013-11-03Updated usage tipmattifestation1-1/+4
2013-11-03Added a usage tipmattifestation1-0/+2
Added a one-liner for PSv3 that will remove the annoying warnings that are displayed when importing scripts downloaded from the Internet.
2013-11-03Slight clarification to license statementmattifestation1-1/+1
2013-11-03Modified license verbiagemattifestation1-1/+1
2013-11-03Added exfil script synopses to README.mdmattifestation1-0/+8
Descriptions for Invoke-NinjaCopy and Invoke-Mimikatz were added to the readme.
2013-11-03Fixed minor logic bug in C type undecorated symbolsmattifestation1-1/+8
2013-11-03Added Get-LibSymbolsmattifestation4-2/+313
Get-LibSymbols parses Microsoft .lib files and displays decorated and undecorated symbols.
2013-10-23Merge pull request #17 from webstersprodigy/portscan-hostlist-fixMatt Graeber1-2/+2
Fix for hostfiles option in powershell 2
2013-10-22Fix for hostfiles option in powershell 2webstersprodigy1-2/+2
2013-10-05Updated usage tipmattifestation1-1/+4
2013-10-05Added a usage tipmattifestation1-0/+2
Added a one-liner for PSv3 that will remove the annoying warnings that are displayed when importing scripts downloaded from the Internet.
2013-10-05Slight clarification to license statementmattifestation1-1/+1
2013-10-05Merge pull request #16 from clymb3r/masterMatt Graeber3-8/+8
Switching to ANSI from UTF8 encoding
2013-10-01Switching to ANSI from UTF8 encodingclymb3r3-8/+8
Scripts now work in 2008r2. I thought I tested before uploading but something broke somehow... Now the scripts work in 2008r2 and win8+
2013-10-01Modified license verbiagemattifestation1-1/+1
2013-10-01Added exfil script synopses to README.mdmattifestation1-0/+8
Descriptions for Invoke-NinjaCopy and Invoke-Mimikatz were added to the readme.
2013-10-01Merge pull request #15 from clymb3r/masterMatt Graeber319-1/+29696
Adding GitIgnore, adding Invoke-NinjaCopy and Invoke-Mimikatz
2013-10-01Adding Invoke-Mimikatz and Invoke-Ninjacopyclymb3r318-1/+29481
2013-10-01Adding gitignore fileclymb3r1-0/+215
Don't want gigantic ipch files from visual studio (among other useless files) to be uploaded.
2013-10-01Merge pull request #14 from clymb3r/masterMatt Graeber1-2593/+2575
Fixes for Windows 8.1/.NET 4.5
2013-09-30Fixes for Windows 8.1/.NET 4.5clymb3r1-2593/+2575
.NET 4.5 introduced breaking changes in the way Marshalling works. Added a fix so ReflectivePEInjection works with Windows 8.1/.NET4.5.
2013-09-30Fixed minor logic bug in C type undecorated symbolsmattifestation1-1/+8
generated by cgit v1.2.3 (git 2.39.1) at 2025-05-31 19:59:47 +0000