Commit Graph

140 Commits

Author SHA1 Message Date
benpturner 44ed6c056b Added description for IncidentResponseToolkit 2025-06-21 11:47:17 +01:00
Ben Turner efb4c98956 Added incident-response-toolkit, updated core modules and minor fixes to help and core and PBind multi-hop 2025-06-21 11:47:17 +01:00
benpturner 7a4f309a79 Net-share-enum-full and updates for KCT 2024-11-29 08:37:47 +00:00
benpturner 0994e9ca72 rdpconnections and netstat 2024-11-23 14:13:56 +00:00
benpturner 56c5023121 Updates
Updated SweetPotato and Core
2024-11-23 14:02:50 +00:00
root c78fbcf265 Update pwn-self implant handler to be python 2 or 3 2024-09-02 16:57:58 +01:00
Mike Bone 09ee2cf5c8 API web page UI/UX updates 2024-09-02 16:57:58 +01:00
benpturner c89d31f523 UnmanagedHandler 2024-09-02 16:57:58 +01:00
benpturner bee2960918 Unmanaged Implant 2024-09-02 16:57:58 +01:00
benpturner 1a1318be07 Fixed get-multi-screenshot bug 2024-09-02 16:57:58 +01:00
benpturner 719de18616 Added Missing Hosted File & Mimi Help & ETW 2024-09-02 16:57:58 +01:00
benpturner 14fd715d3e Updated get-screenshot & get-screenshot-allwindows PS command handler
Updated amsi bypass
Fixed screenshot-allwindows
Multi-Screenshot Typo
2024-09-02 16:57:58 +01:00
benpturner 24c22bc174 Updated Example(s) 2024-09-02 16:57:58 +01:00
benpturner bb2c6e10b4 Updated invoke-shellcode 2024-09-02 16:57:58 +01:00
benpturner e649ff81eb Added amsi-bypass 2024-09-02 16:57:58 +01:00
benpturner 20c974bdd6 Updated PS Implant
Removed AMSI Print Warnings
Added download-file help
Added PS to autoloads
2024-09-02 16:57:58 +01:00
benpturner 64eb5570db reset PS shellcode default back to netsh.exe 2024-04-15 08:51:04 +01:00
benpturner ed27acdb0c Added Proxy100Continue Off Apache2 Headers 2023-11-21 11:39:14 +00:00
benpturner 3e3487f7b8 Added Default Payloads 2023-06-28 10:55:23 +01:00
benpturner 552a34e943 API Integration 2023-06-18 20:48:09 +01:00
benpturner a8f158bba4 Removed pwrStatus fix for get-screenshot 2023-05-09 08:32:00 +01:00
benpturner e64e1ed64e Updated PwrStatus 2023-05-04 13:05:29 +01:00
m0rv4i a7acbdea3d v9 release WIP 2023-03-20 10:39:32 +00:00
m0rv4i 1bc5e7e695 v8.0 release 2022-03-10 10:23:35 +00:00
benpturner 21024955ae Updated Mimikatz, Rubeus and Added Certify 2021-08-09 10:06:31 +01:00
benpturner dd267fab35 Updated C# Core
Curl https://www.google.co.uk <domain-front-header-optional> <proxy-optional> <proxy-user-optional> <proxy-pass-optional>
DllSearcher clr.dll mscoree.dll
FindFile <filename, e.g. flag> <extension, txt> <drive-optional, e.g. c:> <hostname-optional, e.g. 127.0.0.1>
Get-Process <name of process>
GetAadJoinInformation
GetOSVersion
Ldap-Searcher "(&(objectCategory=user)(samaccountname=user))" "LDAP://bloredc1.blorebank.local/DC=blorebank,DC=local"
localgroupmember server1.blorebank.local administrators
LsReg HKEY_LOCAL_MACHINE SOFTWARE\Classes\CLSID
LsRegHKCU SOFTWARE\Classes\CLSID
LsRegHKLM SOFTWARE\Classes\CLSID
RegRead HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall <keyname>
RegReadUninstall
2021-05-07 15:46:02 +01:00
l0gan d9f487a379 Initial JXA Implant 2021-04-09 15:17:30 +01:00
kibercthulhu 9870d2ec22 Added createpbindpayload 2021-04-09 15:16:57 +01:00
benpturner a119f79833 Added searchallhelp 2021-02-16 14:55:44 +00:00
Console 2c069856bd Adding FComm 2021-01-12 17:00:37 +00:00
Mike Bone d81cd7c5a6 Improved Posh reports output & style 2021-01-06 14:48:56 +00:00
benpturner 537dd4a319 Updated PBindSharp 2021-01-06 14:48:56 +00:00
benpturner 9705139bd3 Fixed segfault on new payload generation 2021-01-06 14:48:56 +00:00
benpturner 0df187c3a8 Loadmodule Changes PBindPivot 2021-01-06 14:48:56 +00:00
benpturner c147441eb4 Added Multiple Pivoting Capability in SharpPBind 2021-01-06 14:48:56 +00:00
John Moss 4949ad5673 no need to restart posh on option change from my testing 2021-01-06 14:48:56 +00:00
John Moss 0a313bb25c Updates to support Slack Notifications 2021-01-06 14:48:56 +00:00
benpturner ddfb51561e Fixed sharpsocks-docker 2021-01-06 14:48:56 +00:00
benpturner e487bbb587 Fixed pbind modules not being recorded in the database 2020-12-01 14:40:06 +00:00
benpturner 75ff4df860 Sort auto-completion fields in ImplantHandler 2020-12-01 14:40:06 +00:00
benpturner a60a38faa2 Fixed opsec bug 2020-12-01 14:40:06 +00:00
root 2b1a96802f StandIn Alias 2020-12-01 14:40:06 +00:00
root 0678a842bf StandIn Help 2020-12-01 14:40:06 +00:00
m0rv4i d1691fa483 WIP runaspayload not working 2020-12-01 14:40:06 +00:00
m0rv4i a05fcc7a0d Fix invoke-runas handling 2020-12-01 14:40:06 +00:00
m0rv4i 63e1430c0e Fix SharpSocks comms URL and add User Agent 2020-12-01 14:40:06 +00:00
benpturner b3df49fc22 Split out help commands 2020-12-01 14:40:06 +00:00
benpturner 1d65e76693 Ordered help 2020-12-01 14:40:06 +00:00
benpturner 00faa233a3 Updated stopsocks for sharpsocks in C# 2020-10-13 09:01:31 +01:00
m0rv4i 8439f79457 Quote args in PS startdaisy 2020-10-13 09:01:31 +01:00