| Age | Commit message (Collapse) | Author | Files | Lines | |
|---|---|---|---|---|---|
| 2014-02-12 | Inject-LogonCredentials has been renamed to Invoke-CredentialInjection. | clymb3r | 1 | -1/+1 | |
| Added a check to ensure the script isn't being run from Session0 with the "NewWinLogon" flag. This flag does not work in Session0 because winlogon.exe tries to load stuff from user32.dll which requires a desktop is present. This is not possible in Session0 because there is no desktop/GUI, so it causes winlogon to load and then immediately close with error code c0000142 indicating a DLL failed to initialize. There is no way to fix this that I know of, if you need to run the script from Session0 use the "ExistingWinLogon" flag. | |||||
| 2013-11-17 | Adding Inject-LogonCredentials | clymb3r | 1 | -1/+1 | |
| 2013-11-03 | Adding Invoke-TokenManipulation | clymb3r | 1 | -1/+1 | |
| 2013-10-01 | Adding Invoke-Mimikatz and Invoke-Ninjacopy | clymb3r | 1 | -1/+2 | |
| 2013-07-03 | Updated Get-GPPPassword | Matt Graeber | 1 | -1/+1 | |
| 2013-06-30 | Added Get-Keystrokes | Matt Graeber | 1 | -1/+1 | |
| Get-Keystrokes is a PowerShell keylogger | |||||
| 2013-05-15 | Added Out-Minidump | Matt Graeber | 1 | -1/+2 | |
| Out-Minidump writes a process dump file with all process memory to disk. This is similar to running procdump.exe with the '-ma' switch. | |||||
| 2013-01-20 | Added 'Exfiltration' Module | bitform | 1 | -0/+87 | |