mattifestation
a40e79da93
Updated usage tip
2013-11-03 22:48:50 -08:00
mattifestation
1e4dc7b49f
Added a usage tip
...
Added a one-liner for PSv3 that will remove the annoying warnings that
are displayed when importing scripts downloaded from the Internet.
2013-11-03 22:48:50 -08:00
mattifestation
05cbdab96e
Slight clarification to license statement
2013-11-03 22:48:49 -08:00
mattifestation
8c13faaf51
Modified license verbiage
2013-11-03 22:48:49 -08:00
mattifestation
cf64b10d5c
Added exfil script synopses to README.md
...
Descriptions for Invoke-NinjaCopy and Invoke-Mimikatz were added to the
readme.
2013-11-03 22:48:48 -08:00
mattifestation
9fbb4ec3c3
Added Get-LibSymbols
...
Get-LibSymbols parses Microsoft .lib files and displays decorated and
undecorated symbols.
2013-11-03 22:48:47 -08:00
mattifestation
6807da424f
Added ProcessModuleTrace cmdlets
...
Added *-ProcessModuleTrace cmdlets to trace details when modules are
loaded into a process. These can be useful for malware analysis.
2013-08-29 19:56:01 +00:00
Matt Graeber
9bb31fc9b9
Removing Get-PEArchitecture
...
This functionality is present and maintained in Get-PEHeader.
2013-08-17 17:16:38 -04:00
Matt Graeber
55a6dbd019
Added Get-ObjDump
...
Get-ObjDump parses and return information about one or more Windows
object files. It is similar to dumpbin but it returns objects!
2013-07-09 20:17:01 -04:00
Matt Graeber
b507290d78
Added Invoke-Portscan to README
2013-07-06 13:38:35 -04:00
Matt Graeber
371c65c9a7
Updated Get-GPPPassword
2013-07-03 05:46:44 -04:00
Matt Graeber
717950d00c
Added Get-Keystrokes
...
Get-Keystrokes is a PowerShell keylogger
2013-06-30 11:15:02 -04:00
Matt Graeber
e210c89f39
Added New-Object proxy function
...
You can provide a CLSID (i.e. a Guid) to New-Object via the -ComObject
parameter in addition to a ProgId.
2013-06-05 22:03:27 -04:00
Matt Graeber
dfec277813
Added Invoke-ReflectivePEInjection
...
Another awesome addition from Joe Bialek. Invoke-ReflectivePEInjection
is a vast improvement over Invoke-ReflectiveDllInjection. It adds the
following features:
* Now supports loading exe files in memory
* Supports reflective dll injection into a remote process
* Additional sample Visual Studio solutions
2013-05-31 19:35:26 -04:00
Matt Graeber
af04f7e528
Added Out-Minidump
...
Out-Minidump writes a process dump file with all process memory to disk.
This is similar to running procdump.exe with the '-ma' switch.
2013-05-15 20:54:16 -04:00
Matt Graeber
2a17b8fb56
Added Watch-BlueScreen
...
Causes a blue-screen (bugcheck) to occur.
2013-05-13 20:01:59 -04:00
Matt Graeber
ea0dc9a2b8
Added Get-NtSystemInformation
...
Get-NtSystemInformation is a wrapper function for
NtQuerySystemInformation. It is a swiss-army knife tool for obtaining
internal OS information. It can currently be used to query the
following: global flags, handles, objects, kernel pool allocations, and
loaded kernel modules
2013-05-12 10:27:15 -04:00
Matt Graeber
2224f4dca9
Adding reflective DLL loading capability
...
Adding Invoke-ReflectiveDllInjection. PowerSploit now has reflective DLL
loading capabilities!!! Thanks to Joe Bialek @JosephBialek for writing
this awesome code!
2013-04-06 07:04:16 -04:00
Matt Graeber
014a7bb421
Adding Invoke-ShellcodeMSIL
...
Invoke-ShellcodeMSIL executes shellcode without making any Win32
function calls.
2013-04-05 14:06:58 -04:00
Matt Graeber
577be2fea5
Adding Persistence module
2013-04-04 15:10:09 -04:00
bitform
46aead39c6
PowerSploit is now a respectable module!
...
PowerSploit just got a complete makeover! It is now comprised of a
collection of modules grouped by category.
2013-01-20 21:40:02 -05:00
bitform
710514553b
Updated PowerSploit README with proper markdown
2013-01-20 18:28:52 -05:00