diff --git a/Offensive.md b/Offensive.md index 51363f0..e5f78b1 100644 --- a/Offensive.md +++ b/Offensive.md @@ -547,6 +547,10 @@ Some tools can be categorized in more than one category. But because the current ben0xa/doucme This leverages the NetUserAdd Win32 API to create a new computer account. This is done by setting the usri1_priv of the USER_INFO_1 type to 0x1000. The primary goal is to avoid the normal detection of new user created events (4720). + + djhohnstein/SharpSC + Simple .NET assembly to interact with services. + fireeye/SharPersist Windows persistence toolkit written in C#.