125 Commits

Author SHA1 Message Date
Und3rf10w ad6ac8299e added matrix-hookshot cna 2023-07-29 10:53:49 -04:00
Und3rf10w 604d4f8150 Update DebugKit.cna
CS Update broke debugkit
2023-05-23 09:54:52 -04:00
Jonathan Echavarria c56c8fc813 Resolved typo in AntiForensicsKit 2017-08-24 13:07:38 -04:00
Jonathan Echavarria d1b4a45e06 Merge branch 'ebowla-interop' 2017-08-24 13:05:12 -04:00
Jonathan Echavarria 0e49b37642 Merge branch 'master' into ebowla-interop 2017-08-24 13:04:42 -04:00
Jonathan Echavarria adabcb5344 Added addtional invoke-phant0m functionality 2017-08-24 13:03:51 -04:00
Jonathan Echavarria 4b73aaa0ee Replaced Invoke-Phant0m with new version 2017-08-24 13:00:10 -04:00
Jonathan Echavarria 21469123a1 Modified AntiForensicsKit 2017-08-24 09:37:37 -04:00
Jonathan Echavarria 0fffea6722 added Invoke-Phant0m 2017-08-24 09:33:29 -04:00
Jonathan Echavarria 2469d506f8 added webservice.sl for later use 2017-08-22 12:18:58 -04:00
Jonathan Echavarria b4528d9a60 Commented out Get Chrome Passwords from CredKit
Fixes #18
2017-07-11 10:16:34 -04:00
Jonathan Echavarria 08ebb56cbe Merge pull request #17 from zacharyhenson/add_bloodhound
Add menu support for bloodhound c2 ingestion
2017-05-17 10:23:40 -04:00
Und3rf10w ec4b6693d2 Added BloodHound.ps1, modified bloodhound to feed directly into ingestor instead of using CSV 2017-05-17 10:22:00 -04:00
Und3rf10w 4ac510ca98 Modified indentation, updated EnumKit.cna 2017-05-17 10:07:04 -04:00
Zack Henson 1d06403729 Add menu support for bloodhound 2017-04-03 15:40:06 -04:00
Jonathan Echavarria 25f369b7a7 fixed bug in PersistKit 2017-03-08 14:16:54 -05:00
Jonathan Echavarria 3aeb4899c8 ebowla changes 1 2017-03-08 14:14:39 -05:00
Jonathan Echavarria 2117a5eb92 s/vaild/valid/ 2017-03-06 00:33:21 -05:00
Jonathan Echavarria 14e09f62ca Added remaining functionality of ebwola-interop
Add functionality to ebowla-interop.cna that integrates the login pop-up with dynamically generated ebowla payloads. This commit has not been tested.
2017-03-06 00:22:51 -05:00
Jonathan Echavarria 1e2f20269c bugfix for process tree 2017-03-02 09:38:26 -05:00
Jonathan Echavarria 4b7be4b677 added process tree searcher to DebugKit 2017-03-01 16:50:13 -05:00
Jonathan Echavarria 41babb4e09 bugfix for #15 2017-03-01 09:40:50 -05:00
Jonathan Echavarria 998a679ed7 Added the start of ebowla interoperability 2017-02-28 14:57:57 -05:00
Jonathan Echavarria c857c623be updates to inveigh 2017-02-20 12:46:47 -05:00
Jonathan Echavarria 88055342fe fixed but in debugkit 2017-02-20 11:07:30 -05:00
Jonathan Echavarria c217f312e3 fixed but in debugkit 2017-02-20 11:04:28 -05:00
Jonathan Echavarria f8e6a1f1df added knightlab timeline report generator 2017-02-09 13:59:35 -05:00
Jonathan Echavarria e2ecdeb2fa added ThridParty to kit and moved Get-MicrophoneAudio from dev to master 2017-02-09 13:51:57 -05:00
Jonathan Echavarria 454ae81d8b merge 2017-02-09 13:31:11 -05:00
Jonathan Echavarria 039b3740b6 commented out broken code on debugkit 2017-02-09 13:29:54 -05:00
Und3rf10w 381f7b87c2 fixed debugkit, waiting for CS patch 2017-01-23 18:18:25 -05:00
Jonathan Echavarria 46f5f16c3a added ssh alias 2017-01-11 16:02:02 -05:00
Jonathan Echavarria 7cb928aaad resolved a todo in debugkit 2017-01-11 14:45:43 -05:00
Jonathan Echavarria f443ecabe9 added some aliases to kitloader.cna 2017-01-11 13:45:53 -05:00
Jonathan Echavarria d000d55980 added to Debug kit 2017-01-11 12:24:55 -05:00
Jonathan Echavarria 412e318b17 Updated powersploit scripts to latest dev 2017-01-09 12:43:59 -05:00
Jonathan Echavarria 127b128eec added intelligent keyhive selection for Invoke-ADSBackdoor 2017-01-06 13:49:22 -05:00
Jonathan Echavarria cd250ac232 Merge pull request #14 from mandreko/fix_paths
Fix paths for Invoke-ADSBackdoor
2017-01-06 10:15:42 -05:00
Matt Andreko f04f827dd4 Miscellaneous Fixes
Added .vbs file extensions since wscript will not execute non-vbs files
Removed superflous quotes causing issues with execution
Modified registry key to be HKCU instead of HKLM since it's supposed to be executed by non-admins
Added expanding of environmental variables such as %APPDATA% to the backdoored file path
2017-01-05 19:10:16 -05:00
Matt Andreko baf149e5d7 Fixed default path to have proper escaping 2017-01-05 19:08:04 -05:00
Jonathan Echavarria e557d43bf1 commiting to bpowershell for fileless backdoor 2017-01-05 12:25:44 -05:00
Jonathan Echavarria e9fac0143c added additional functionality to fileless backdoor 2017-01-05 12:19:21 -05:00
Jonathan Echavarria 44ef6897eb fixes #13 2017-01-04 17:54:47 -05:00
Jonathan Echavarria 53a36c4663 minor bugfix 2016-10-19 17:54:22 -04:00
Jonathan Echavarria 0120ac86c2 revised readme 2016-10-19 16:21:29 -04:00
Jonathan Echavarria ae1d100643 Merge pull request #12 from Und3rf10w/persist-dev
added poweliks persistence emulation
2016-10-19 16:20:28 -04:00
Und3rf10w abcb02f7ce added poweliks persistence emulation 2016-10-19 16:01:49 -04:00
Und3rf10w 61fb35fe1b Reverted Inveigh Downgrade 2016-10-19 13:20:29 -04:00
Und3rf10w 8e7bb7b8f7 Added anti-carbon black scripts 2016-10-19 13:16:54 -04:00
Jonathan Echavarria 5e323303d5 Added some debug things 2016-10-18 19:57:28 -04:00