RemotePSpy

RemotePSpy RemotePSpy proporciona monitorización en vivo de sesiones remotas de PowerShell, lo que resulta especialmente útil para versiones antiguas anteriores a la 5.0 de PowerShell que no disponen de funciones integrales de registro integradas. Utiliza Event Tracing for Windows ETW para obtene...

WinAPI User Hunter: hunter

WinAPI User Hunter During Red Team engagements it is common to track/hunt specific users. Assuming we already have access to a desktop as a normal user no matter how, always “assume compromise” in a Windows Domain and we want to spread laterally. We want to know where the user is logged on, if he...