From 70a3a43f24006a6cddd62dcb181efc860f3de22c Mon Sep 17 00:00:00 2001 From: mattifestation Date: Tue, 1 Oct 2013 17:41:54 -0400 Subject: Added exfil script synopses to README.md Descriptions for Invoke-NinjaCopy and Invoke-Mimikatz were added to the readme. --- README.md | 8 ++++++++ 1 file changed, 8 insertions(+) (limited to 'README.md') diff --git a/README.md b/README.md index e326519..2d500d7 100644 --- a/README.md +++ b/README.md @@ -144,6 +144,14 @@ Locates single Byte AV signatures utilizing the same method as DSplit from "clas **All your data belong to me!** +#### `Invoke-NinjaCopy` + +Copies a file from an NTFS partitioned volume by reading the raw volume and parsing the NTFS structures. + +#### `Invoke-Mimikatz` + +Reflectively loads Mimikatz 1.0 in memory using PowerShell. Can be used to dump credentials without writing anything to disk. Can be used for any functionality provided with Mimikatz. + #### `Get-Keystrokes` Logs keys pressed, time and the active window. -- cgit v1.2.3