diff --git a/AutoLoads.py b/AutoLoads.py index cfd54ef..64d041b 100644 --- a/AutoLoads.py +++ b/AutoLoads.py @@ -53,6 +53,7 @@ def run_autoloads(command, randomuri): if "get-gpppassword" in command.lower(): check_module_loaded("Get-GPPPassword.ps1", randomuri) if "get-idletime" in command.lower(): check_module_loaded("Get-IdleTime.ps1", randomuri) if "get-keystrokes" in command.lower(): check_module_loaded("Get-Keystrokes.ps1", randomuri) + if "get-hash" in command.lower(): check_module_loaded("Get-Hash.ps1", randomuri) if "get-locadm" in command.lower(): check_module_loaded("Get-LocAdm.ps1", randomuri) if "get-mshotfixes" in command.lower(): check_module_loaded("Get-MSHotFixes.ps1", randomuri) if "get-netstat" in command.lower(): check_module_loaded("Get-Netstat.ps1", randomuri) diff --git a/Help.py b/Help.py index 1191298..98490b1 100644 --- a/Help.py +++ b/Help.py @@ -39,6 +39,9 @@ Implant Features: ===================== ps searchhelp mimikatz +get-hash +unhidefile +hidefile beacon 60s / beacon 10m / beacon 2h turtle 60s / turtle 30m / turtle 8h kill-implant @@ -351,7 +354,8 @@ COMMANDS = ['loadmodule',"bloodhound","brute-ad","brute-locadmin", "invoke-eternalblue","loadmoduleforce","unhook-amsi","get-implantworkingdirectory","get-system", "get-system-withproxy","get-system-withdaisy","get-pid","listmodules","modulesloaded", "startanotherimplant","remove-persistence","removeexe-persistence","installexe-persistence", -"resolve-ipaddress","invoke-wmievent","remove-wmievent","get-wmievent","invoke-smbclient","get-keystrokedata"] +"get-hash","get-creds","resolve-ipaddress","invoke-wmievent","remove-wmievent","get-wmievent", +"invoke-smbclient","get-keystrokedata","unhidefile","hidefile"] COMMANDS += ['invoke-psexecpayload','invoke-wmipayload', 'invoke-dcompayload'] COMMANDS += ['invoke-psexecproxypayload','invoke-wmiproxypayload', 'invoke-dcomproxypayload']