Login Register






The stories and information posted here are artistic works of fiction and falsehood. Only a fool would take anything posted here as fact.
Thread Rating:
  • 0 Vote(s) - 0 Average


Nishang - Post Exploitation Powershell toolkit filter_list
Author
Message
Nishang - Post Exploitation Powershell toolkit #1
NISHANG
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

Link to the GitHub:
https://github.com/samratashok/nishang


Notes from the developer:
Nishang is a framework and collection of scripts and payloads which enables usage of PowerShell for offensive security and during Penetraion Tests. Nishang is useful during various phases of a penetration test and is most powerful for post exploitation usage.

Notes from myself:
The scripts provided from the nishang toolkit work fairly well, and provides quick and easy methods of persistence on an exploited host when you are in a pinch. Considering that these scripts run naively on all Windows (7 and above) hosts with very little configuration or prep time.

While I really enjoy these scripts, its important to note that these scripts are louder when compared to some of the alternatives I have worked with. Several of these scripts may trigger logged events that must be purged and almost all of them require a running process in some form or another. Antak will address some of these issues.... But I have personally had some mixed results with these additions.


Pitfalls:
  • Some of the more useful tools require administrative access (So priv escalation is essential!)

Reply







Users browsing this thread: 1 Guest(s)