Commit Graph

31 Commits

Author SHA1 Message Date
Dan Bourke f5c852b834 add windows browser extension docs and payload 2018-02-26 13:14:07 +11:00
caseysmithrc af7be36230 Update Payload 2018-02-11 21:19:46 -07:00
caseysmithrc 3ac9834f38 mshta 2018-01-16 08:56:26 -07:00
caseysmithrc 1b087c7e2a Update Program.cs 2018-01-13 12:28:33 -07:00
atmathis dce29fd24d Add/Change Mac and All the Things cleanup
Created Mac/Credential_Access/Input_Prompt
Added AppleScript password prompt to Credential Access/Input Prompt
Cleanup Mac/Execution/AppleScript
Updated Mac Grid
Updated formatting on AllTheThings test.bat
2017-12-29 12:12:54 -05:00
caseysmithrc d266915612 Update All The Things 2017-12-20 15:39:07 -07:00
caseysmithrc 1d57ef77e0 Fix Shim References 2017-12-07 09:03:07 -07:00
caseysmithrc 67613f4a44 Context For Shims 2017-12-06 15:40:21 -07:00
caseysmithrc 809e2cb4b8 Fix Typo 2017-12-06 15:12:35 -07:00
caseysmithrc 7bec20d991 App Compat ReadMe 2017-12-06 15:11:56 -07:00
caseysmithrc 44611b8f3b Fix Instructions 2017-12-06 15:05:18 -07:00
caseysmithrc 14f2a68a96 Shim Test Files 2017-12-06 14:52:06 -07:00
caseysmithrc b8cd61afb4 Fix Casing 2017-12-01 13:04:29 -07:00
caseysmithrc 1804b97780 Updated All the Things 2017-11-30 08:54:10 -07:00
Michael Haag f47d9be70a Merge pull request #35 from redcanaryco/Protoss-Dev
Updated AllTheThings
2017-11-30 08:36:08 -07:00
caseysmithrc e4e892da8b Updated All The Things 2017-11-30 06:25:37 -07:00
caseysmithrc 5375477446 Updated AllTheThings Example 2017-11-30 06:08:27 -07:00
caseysmithrc 58426cd424 Merge pull request #29 from redcanaryco/dev-mh
Updated Formatting + System Service Discovery
2017-11-27 13:09:31 -07:00
Michael Haag f6bfcd4e52 Discovery.bat - add
Added sc.exe query line
2017-11-21 12:17:55 -08:00
caseysmithrc c3d870f399 Update AtomicService.cs 2017-11-19 07:54:51 -07:00
caseysmithrc f84a365a73 Update AtomicService.cs 2017-11-19 07:53:03 -07:00
caseysmithrc df59f2be24 Service Binary Code 2017-11-19 07:42:50 -07:00
caseysmithrc 24e2671f45 Added Invoke-Mimnikatz
Invoke-Mimikatz Locally
2017-11-13 15:06:40 -07:00
caseysmithrc c03b740553 update instructions
Update MHT To Doc Notes
2017-11-13 11:54:20 -07:00
caseysmithrc 4439c529ea Sample VBA
Sample VBA Downloader
2017-11-13 11:53:35 -07:00
Michael Haag d61e743c41 Discovery bat fix
Removed a basic thing and made it even more basic
2017-11-03 09:56:44 -07:00
Michael Haag e22d823c4b Credentials in Files
+ Credentials in Files
+ add Get-GPPPassword.ps1
+ Update matrix
2017-11-02 11:53:28 -07:00
Michael Haag be85bb6afe Discovery bat
+ Added reg queries to payload.
2017-10-31 12:58:40 -07:00
Michael Haag 34dd80d94b Initial Commit
+ Audio Capture
+ Automated Collection
+ Input Capture
+ collection bat
+ Payload
+ Updated Matrix
2017-10-12 15:05:28 -07:00
Michael Haag 87743faf73 Discovery
+ Added a Discovery bat file to run all the things at once. Generally, none of this activity is deemed "evil" as it is recon activity. Seeing it all run at once should be suspect to anyone.
+ Updates to two discovery files.
2017-10-12 10:35:44 -07:00
caseysmithrc ac8dd2cfec Initial Commit
Initial Checkin
2017-10-11 10:35:17 -07:00