Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2016-11-21 | Added Get-GPPAutologon.ps1 | Oddvar Moe | 1 | -1/+2 | |
2015-12-18 | Set all module versions to 3.0 | Matt Graeber | 1 | -16/+1 | |
Also cleaned up some module manifest cruft. | |||||
2014-06-30 | Get-VaultCredential now takes the singular form. | mattifestation | 1 | -2/+2 | |
2014-05-30 | Issue #43 - Adding Get-VaultCredentials | mattifestation | 1 | -41/+2 | |
Displays Windows vault credential objects including cleartext web credentials. | |||||
2014-03-01 | Added Get-VolumeShadowCopy and Mount-VolumeShadowCopy | mattifestation | 1 | -1/+2 | |
2014-02-12 | Merge pull request #28 from clymb3r/master | Matt Graeber | 1 | -1/+1 | |
Inject-LogonCredentials has been renamed to Invoke-CredentialInjection. | |||||
2014-02-12 | Inject-LogonCredentials has been renamed to Invoke-CredentialInjection. | clymb3r | 1 | -1/+1 | |
Added a check to ensure the script isn't being run from Session0 with the "NewWinLogon" flag. This flag does not work in Session0 because winlogon.exe tries to load stuff from user32.dll which requires a desktop is present. This is not possible in Session0 because there is no desktop/GUI, so it causes winlogon to load and then immediately close with error code c0000142 indicating a DLL failed to initialize. There is no way to fix this that I know of, if you need to run the script from Session0 use the "ExistingWinLogon" flag. | |||||
2013-11-18 | Merge pull request #21 from clymb3r/master | Matt Graeber | 1 | -1/+1 | |
Adding Inject-LogonCredentials | |||||
2013-11-17 | Adding Inject-LogonCredentials | clymb3r | 1 | -1/+1 | |
2013-11-13 | Normalized all scripts to ASCII encoding | mattifestation | 1 | -2/+2 | |
2013-11-03 | Adding Invoke-TokenManipulation | clymb3r | 1 | -1/+1 | |
2013-10-01 | Adding Invoke-Mimikatz and Invoke-Ninjacopy | clymb3r | 1 | -1/+2 | |
2013-07-03 | Updated Get-GPPPassword | Matt Graeber | 1 | -1/+1 | |
2013-06-30 | Added Get-Keystrokes | Matt Graeber | 1 | -1/+1 | |
Get-Keystrokes is a PowerShell keylogger | |||||
2013-05-15 | Added Out-Minidump | Matt Graeber | 1 | -1/+2 | |
Out-Minidump writes a process dump file with all process memory to disk. This is similar to running procdump.exe with the '-ma' switch. | |||||
2013-01-20 | Added 'Exfiltration' Module | bitform | 1 | -0/+87 | |