8b00163b4c
Updated AmsiScanBuffer Patch
2025-11-20 13:55:13 +00:00
efb4c98956
Added incident-response-toolkit, updated core modules and minor fixes to help and core and PBind multi-hop
2025-06-21 11:47:17 +01:00
533ec812f8
Updated Sharp Shellcode
...
Added CLR AMSI
2024-11-29 08:50:38 +00:00
7a4f309a79
Net-share-enum-full and updates for KCT
2024-11-29 08:37:47 +00:00
f094da4c35
Fixed fpc
2024-11-24 10:40:57 +00:00
0994e9ca72
rdpconnections and netstat
2024-11-23 14:13:56 +00:00
56c5023121
Updates
...
Updated SweetPotato and Core
2024-11-23 14:02:50 +00:00
b02d735224
Updated logos
2024-09-02 16:57:58 +01:00
123db87d33
Add file uploader to payloads & auto refresher for files/downloads
2024-09-02 16:57:58 +01:00
cac58e8e69
Add reports section to API
2024-09-02 16:57:58 +01:00
09ee2cf5c8
API web page UI/UX updates
2024-09-02 16:57:58 +01:00
c89d31f523
UnmanagedHandler
2024-09-02 16:57:58 +01:00
cffe929058
Obfuscated shellcode
2024-09-02 16:57:58 +01:00
bee2960918
Unmanaged Implant
2024-09-02 16:57:58 +01:00
1a1318be07
Fixed get-multi-screenshot bug
2024-09-02 16:57:58 +01:00
719de18616
Added Missing Hosted File & Mimi Help & ETW
2024-09-02 16:57:58 +01:00
14fd715d3e
Updated get-screenshot & get-screenshot-allwindows PS command handler
...
Updated amsi bypass
Fixed screenshot-allwindows
Multi-Screenshot Typo
2024-09-02 16:57:58 +01:00
3bfc2b3b16
Updated resource permissions
2024-09-02 16:57:58 +01:00
23601d5193
Added Invoke-Sharp
2024-09-02 16:57:58 +01:00
af6172f271
Updated SharpTask Error
2024-09-02 16:57:58 +01:00
bb2c6e10b4
Updated invoke-shellcode
2024-09-02 16:57:58 +01:00
20c974bdd6
Updated PS Implant
...
Removed AMSI Print Warnings
Added download-file help
Added PS to autoloads
2024-09-02 16:57:58 +01:00
64eb5570db
reset PS shellcode default back to netsh.exe
2024-04-15 08:51:04 +01:00
2dc6e04183
Added newtasks tab and removed some functions from autocomplete (PoC)
2024-04-14 21:42:08 +01:00
41bac16c5a
Changed function name test -> autocomplete.cmd and improved some styles and js code
2024-04-14 21:42:08 +01:00
7fc686a1b6
PoC command autocomplete for implants
2024-04-14 21:42:08 +01:00
1058c530d0
Added possibility to delete implant via GUI, missing file bootstrap.min.css.map added
2024-04-14 21:42:08 +01:00
2e6ed0a972
Added username from auth.username() to newtasks.
2024-04-14 21:42:08 +01:00
5af5cb9a10
Different templates for GUI
2024-04-14 21:42:08 +01:00
04ba093b3a
Added two new functions get_tasks_for_implant, get_c2_messages and templates for GUI
2024-04-14 21:42:08 +01:00
e182530894
Fixed Posh shellcode error
2024-04-14 21:35:15 +01:00
58bb714691
Fixed PS1 implant
2024-04-14 21:09:43 +01:00
ed27acdb0c
Added Proxy100Continue Off Apache2 Headers
2023-11-21 11:39:14 +00:00
36c9f39fee
Added API and Updated Default Payloads
2023-10-20 12:16:52 +01:00
3e3487f7b8
Added Default Payloads
2023-06-28 10:55:23 +01:00
552a34e943
API Integration
2023-06-18 20:48:09 +01:00
42bcf0ee42
Update Stage2-Core.exe
2023-05-16 14:12:33 +01:00
a8f158bba4
Removed pwrStatus fix for get-screenshot
2023-05-09 08:32:00 +01:00
e64e1ed64e
Updated PwrStatus
2023-05-04 13:05:29 +01:00
a7acbdea3d
v9 release WIP
2023-03-20 10:39:32 +00:00
7b5a881492
Update dropper_jxa.js
2022-08-07 19:12:53 -07:00
1db78ff690
Add missing semicolon to initial check in cookie
...
Fixes #271
2022-08-07 19:08:04 -07:00
43ea8a78db
Add XOR payload for Posh_v4_x64 using a key that can be configured in the project's config yaml file.
2022-06-03 11:13:49 +01:00
1bc5e7e695
v8.0 release
2022-03-10 10:23:35 +00:00
5c3f583544
Partial fix for Py3 dropper
2021-08-09 10:06:31 +01:00
21024955ae
Updated Mimikatz, Rubeus and Added Certify
2021-08-09 10:06:31 +01:00
05bd6c4038
Updated msbuild.xml to work out the box
...
Currently puts shellcode in the wrong place so doesnt work out the box with the builds, making it break. This changes them around so its the correct shellcode.
2021-07-14 14:37:56 +01:00
decdeb4ab8
Updated Seatbelt.exe
2021-05-07 15:46:02 +01:00
dd267fab35
Updated C# Core
...
Curl https://www.google.co.uk <domain-front-header-optional> <proxy-optional> <proxy-user-optional> <proxy-pass-optional>
DllSearcher clr.dll mscoree.dll
FindFile <filename, e.g. flag> <extension, txt> <drive-optional, e.g. c:> <hostname-optional, e.g. 127.0.0.1>
Get-Process <name of process>
GetAadJoinInformation
GetOSVersion
Ldap-Searcher "(&(objectCategory=user)(samaccountname=user))" "LDAP://bloredc1.blorebank.local/DC=blorebank,DC=local"
localgroupmember server1.blorebank.local administrators
LsReg HKEY_LOCAL_MACHINE SOFTWARE\Classes\CLSID
LsRegHKCU SOFTWARE\Classes\CLSID
LsRegHKLM SOFTWARE\Classes\CLSID
RegRead HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall <keyname>
RegReadUninstall
2021-05-07 15:46:02 +01:00
02c813d46a
Update Implant-Core.js
2021-05-05 10:20:24 +01:00
benpturner