#invoke-phant0m

AutoRDPwn v4.5 - The Shadow Attack Framework #PWN #ATTACK #SHADOW #GOOGLE #MICROSOFT

AutoRDPwn is a script created in Powershell and designed to automate the Shadow attack on Microsoft Windows computers. This vulnerability allows a remote attacker to view his victim’s desktop without his consent, and even control it on request. For its correct operation, it is necessary to comply with the requirements described in the user guide.

Requirements Powershell 5.0 or higher

Changes

Vers…

Invoke-Phant0m - Windows Event Log Killer #Powershell #windows #Even #log

This script walks thread stacks of Event Log Service process (spesific svchost.exe) and identify Event Log Threads to kill Event Log Service Threads. So the system will not be able to collect logs and at the same time the Event Log Service will appear to be running. I have made this script for two reasons. First, This script will help to Red Teams and Penetration Testers. Second, I want to learn…