From 1a3288376f76745708a0f142b0f24ff37e979941 Mon Sep 17 00:00:00 2001 From: pe3zx Date: Mon, 3 May 2021 00:35:56 +0700 Subject: [PATCH] Add: djhohnstein/SharpSC to Persistence section --- Offensive.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/Offensive.md b/Offensive.md index 51363f0..e5f78b1 100644 --- a/Offensive.md +++ b/Offensive.md @@ -547,6 +547,10 @@ Some tools can be categorized in more than one category. But because the current ben0xa/doucme This leverages the NetUserAdd Win32 API to create a new computer account. This is done by setting the usri1_priv of the USER_INFO_1 type to 0x1000. The primary goal is to avoid the normal detection of new user created events (4720). + + djhohnstein/SharpSC + Simple .NET assembly to interact with services. + fireeye/SharPersist Windows persistence toolkit written in C#.