admin/nettitude-PoshC2
1
0
Fork 0
mirror of https://github.com/nettitude/PoshC2 synced 2026-06-08 16:22:47 +00:00
Code Issues Packages Projects Releases Wiki Activity
912 Commits 4 Branches 26 Tags
AmsiShellcode
Commit Graph

80 Commits

Author SHA1 Message Date
Ben Turner efb4c98956 Added incident-response-toolkit, updated core modules and minor fixes to help and core and PBind multi-hop 2025-06-21 11:47:17 +01:00
benpturner 7a4f309a79 Net-share-enum-full and updates for KCT 2024-11-29 08:37:47 +00:00
benpturner 0994e9ca72 rdpconnections and netstat 2024-11-23 14:13:56 +00:00
benpturner 56c5023121 Updates 
Updated SweetPotato and Core
 2024-11-23 14:02:50 +00:00
benpturner 1a1318be07 Fixed get-multi-screenshot bug 2024-09-02 16:57:58 +01:00
benpturner 719de18616 Added Missing Hosted File & Mimi Help & ETW 2024-09-02 16:57:58 +01:00
benpturner 14fd715d3e Updated get-screenshot & get-screenshot-allwindows PS command handler 
Updated amsi bypass
Fixed screenshot-allwindows
Multi-Screenshot Typo
 2024-09-02 16:57:58 +01:00
benpturner 23601d5193 Added Invoke-Sharp 2024-09-02 16:57:58 +01:00
benpturner af6172f271 Updated SharpTask Error 2024-09-02 16:57:58 +01:00
benpturner bb2c6e10b4 Updated invoke-shellcode 2024-09-02 16:57:58 +01:00
benpturner 20c974bdd6 Updated PS Implant 
Removed AMSI Print Warnings
Added download-file help
Added PS to autoloads
 2024-09-02 16:57:58 +01:00
benpturner 64eb5570db reset PS shellcode default back to netsh.exe 2024-04-15 08:51:04 +01:00
benpturner 58bb714691 Fixed PS1 implant 2024-04-14 21:09:43 +01:00
benpturner ed27acdb0c Added Proxy100Continue Off Apache2 Headers 2023-11-21 11:39:14 +00:00
benpturner 36c9f39fee Added API and Updated Default Payloads 2023-10-20 12:16:52 +01:00
benpturner 3e3487f7b8 Added Default Payloads 2023-06-28 10:55:23 +01:00
benpturner 552a34e943 API Integration 2023-06-18 20:48:09 +01:00
m0rv4i 42bcf0ee42 Update Stage2-Core.exe 2023-05-16 14:12:33 +01:00
benpturner a8f158bba4 Removed pwrStatus fix for get-screenshot 2023-05-09 08:32:00 +01:00
benpturner e64e1ed64e Updated PwrStatus 2023-05-04 13:05:29 +01:00
m0rv4i a7acbdea3d v9 release WIP 2023-03-20 10:39:32 +00:00
m0rv4i 1bc5e7e695 v8.0 release 2022-03-10 10:23:35 +00:00
benpturner 21024955ae Updated Mimikatz, Rubeus and Added Certify 2021-08-09 10:06:31 +01:00
benpturner decdeb4ab8 Updated Seatbelt.exe 2021-05-07 15:46:02 +01:00
benpturner dd267fab35 Updated C# Core 
Curl https://www.google.co.uk <domain-front-header-optional> <proxy-optional> <proxy-user-optional> <proxy-pass-optional>
DllSearcher clr.dll mscoree.dll
FindFile <filename, e.g. flag> <extension, txt> <drive-optional, e.g. c:> <hostname-optional, e.g. 127.0.0.1>
Get-Process <name of process>
GetAadJoinInformation
GetOSVersion
Ldap-Searcher "(&(objectCategory=user)(samaccountname=user))" "LDAP://bloredc1.blorebank.local/DC=blorebank,DC=local"
localgroupmember server1.blorebank.local administrators
LsReg HKEY_LOCAL_MACHINE SOFTWARE\Classes\CLSID
LsRegHKCU SOFTWARE\Classes\CLSID
LsRegHKLM SOFTWARE\Classes\CLSID
RegRead HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall <keyname>
RegReadUninstall
 2021-05-07 15:46:02 +01:00
benpturner f6664b1786 Updated SharpHound3 Modules 2021-04-26 19:49:40 +01:00
Christopher Tran 6467a5ed13 update SharpHound to SharpHound 3 for BloodHound 3+ support 2021-04-26 19:49:40 +01:00
l0gan d9f487a379 Initial JXA Implant 2021-04-09 15:17:30 +01:00
Console e494b04cec Changes required to fix issue with commands containing commas. 2021-02-10 07:21:22 +00:00
benpturner e4b6fc90c3 Updated PBind module to fix kill-implant 2021-01-29 12:50:32 +00:00
Console 2c069856bd Adding FComm 2021-01-12 17:00:37 +00:00
benpturner cd616e43d3 Fixed modules to UTF-8 not UTF-8 BOM 2021-01-06 14:48:56 +00:00
benpturner 537dd4a319 Updated PBindSharp 2021-01-06 14:48:56 +00:00
benpturner 4471ce24d5 Updated PBind to take B64 commands 2021-01-06 14:48:56 +00:00
benpturner 39c4727ab6 Updated Stage2-Core.exe to Close All Open Handles 2020-12-01 14:40:06 +00:00
console 6a57527284 Changes in relation to a bug raised in copyfile. 2020-12-01 14:40:06 +00:00
root 68f6a65029 StandIn commit 2020-12-01 14:40:06 +00:00
m0rv4i 9d1c486ad2 Fix and Update SafetyDump & integration 2020-12-01 14:40:06 +00:00
benpturner a19c0e3fc7 Updated core to fix get-screenshotmulti 2020-12-01 14:40:06 +00:00
benpturner 00faa233a3 Updated stopsocks for sharpsocks in C# 2020-10-13 09:01:31 +01:00
benpturner f26806bea3 Add SharpSocks port to Dockerfile 
Get-ScreenshotAllWindows Moved to Individual Module
 2020-10-13 09:01:31 +01:00
h3x-agram c3c2fd1885 Update Get-CreditCardData.ps1 
commenting out line 16 as it's not used and can cause an error
 2020-08-19 22:08:49 +01:00
PwnDexter 91239443e1 SharpEDRChecker Update 2020-08-19 18:00:32 +01:00
m0rv4i b39bb78812 Add Get-UserLogons 2020-08-17 14:37:09 +01:00
m0rv4i 8ff7c8fb14 Update PBind.exe to avoid kill command clashes 2020-08-17 14:37:09 +01:00
PwnDexter 81ccea42e5 Added SharpEDRChecker and fixed @Macs shenanigans 2020-08-17 14:37:09 +01:00
BaffledJimmy e7098860f4 Add SharpAddLocker from https://github.com/Flangvik/SharpAppLocker/ 2020-08-06 11:35:17 +01:00
m0rv4i a8e6511f93 Remove unhook-amsi as that is in fact, flagged by AMSI 2020-08-06 11:35:17 +01:00
m0rv4i 97469e9848 Add LockLess for copying and extracting locked files 2020-08-05 15:48:07 +01:00
benpturner 268dc5dcb3 Updated Module Loading Message 2020-08-04 18:06:30 +01:00