diff --git a/Offensive.md b/Offensive.md index 1ad0e19..00dad82 100644 --- a/Offensive.md +++ b/Offensive.md @@ -1236,11 +1236,13 @@ Some tools can be categorized in more than one category. But because the current aas-n/spraykatz Credentials gathering tool automating remote procdump and parse of lsass process. + + anthemtotheego/CredBandit + Proof of concept Beacon Object File (BOF) that uses static x64 syscalls to perform a complete in memory dump of a process and send that back through your already existing Beacon communication channel + Arvanaghi/SessionGopher - SessionGopher is a PowerShell tool that uses WMI to extract saved session information for remote access - tools such as WinSCP, PuTTY, SuperPuTTY, FileZilla, and Microsoft Remote Desktop. It can be run remotely or - locally. + SessionGopher is a PowerShell tool that uses WMI to extract saved session information for remote access tools such as WinSCP, PuTTY, SuperPuTTY, FileZilla, and Microsoft Remote Desktop. It can be run remotely or locally. b4rtik/SharpKatz