PowerSploit - PowerSploit - A PowerShell Post-Exploitation Framework

Age	Commit message (Collapse)	Author	Files	Lines
2014-07-12	Merge pull request #52 from clymb3r/master	Matt Graeber	1	-63/+157
	Bug fixes to Invoke-ReflectivePEInjection
2014-07-10	Bug fixes to Invoke-ReflectivePEInjection	clymb3r	1	-63/+157
	Fixed a bug where calling GetProcAddress by ordinal instead of procedure name failed. Fixed a bug where reflectively loading an EXE will cause the entry function (main()) to be called twice instead of once as expected. Added a ForceASLR flag to force ASLR to be used even if the PE file doesn't officially support ASLR. Some minor other changes.
2014-06-21	Invoke-DllInjection now calls RtlCreateUserThread	mattifestation	1	-24/+26
	Calling CreateRemoteThread on lsass. Bug fix: Invoke-DllInjection was checking the processor architecture when it should have been validating the OS architecture. This would cause Invoke-DllInjection to fail on a 32-bit OS with a 64-bit processor.
2014-06-19	Removing Watch-BlueScreen	mattifestation	2	-79/+1
	This vulnerability was patched a while ago making this function largely irrelevant.
2013-11-13	Normalized all scripts to ASCII encoding	mattifestation	6	-10/+10

2013-10-01	Switching to ANSI from UTF8 encoding	clymb3r	1	-2/+2
	Scripts now work in 2008r2. I thought I tested before uploading but something broke somehow... Now the scripts work in 2008r2 and win8+
2013-09-30	Fixes for Windows 8.1/.NET 4.5	clymb3r	1	-2593/+2575
	.NET 4.5 introduced breaking changes in the way Marshalling works. Added a fix so ReflectivePEInjection works with Windows 8.1/.NET4.5.
2013-09-03	Call to DllMain when unloading reflective DLL	clymb3r	1	-0/+9
	Prior to this fix, DllMain with the ProessDetach flag was not called when unloading the reflectively loaded DLL. This was causing very weird crashes in the Invoke-NinjaCopy script which is built on this script. This should fix the crash.
2013-05-31	Added Invoke-ReflectivePEInjection	Matt Graeber	55	-1549/+4244
	Another awesome addition from Joe Bialek. Invoke-ReflectivePEInjection is a vast improvement over Invoke-ReflectiveDllInjection. It adds the following features: * Now supports loading exe files in memory * Supports reflective dll injection into a remote process * Additional sample Visual Studio solutions
2013-05-13	Added an idiot filter to Watch-BlueScreen	Matt Graeber	1	-3/+7

2013-05-13	Added Watch-BlueScreen	Matt Graeber	2	-1/+75
	Causes a blue-screen (bugcheck) to occur.
2013-05-12	Removed test code in Invoke-ShellcodeMSIL	Matt Graeber	1	-4/+1
	There was some test code at the end of Invoke-ShellcodeMSIL that would cause the function to execute when the script was dotsourced.
2013-04-06	Adding reflective DLL loading capability	Matt Graeber	14	-1/+1956
	Adding Invoke-ReflectiveDllInjection. PowerSploit now has reflective DLL loading capabilities!!! Thanks to Joe Bialek @JosephBialek for writing this awesome code!
2013-04-05	Adding Invoke-ShellcodeMSIL	Matt Graeber	2	-87/+357
	Invoke-ShellcodeMSIL executes shellcode without making any Win32 function calls.
2013-02-17	Updated 64-32bit conversion logic for Metasploit	bitform	1	-2/+2

2013-01-21	Consistency improvements in comment-based help	bitform	2	-2/+2

2013-01-20	Added 'CodeExecution' Module	bitform	5	-0/+1142
	* I unfortunately needed to change the names of Inject-Shellcode and Inject-Dll to Invoke-Shellcode and Invoke-DllInjection in order to confirm to proper verb naming.