Monday, April 13, 2020

Ps-Tools - An Advanced Process Monitoring Toolkit For Offensive Operations


Having a good technical understanding of the systems we land on during an engagement is a key condition for deciding what is going to be the next step within an operation. Collecting and analysing data of running processes from compromised systems gives us a wealth of information and helps us to better understand how the IT landscape from a target organisation is setup. Moreover, periodically polling process data allows us to react on changes within the environment or provide triggers when an investigation is taking place.
To be able to collect detailed process data from compromised end-points we wrote a collection of process tools which brings the power of these advanced process utilities to C2 frameworks (such as Cobalt Strike).

More info about the tools and used techniques can be found on the following Blog: https://outflank.nl/blog/2020/03/11/red-team-tactics-advanced-process-monitoring-techniques-in-offensive-operations/

The following functionality is included in the toolkit:
Psx: Shows a detailed list of all processes running on the system.
Psk: Shows detailed kernel information including loaded driver modules.
Psc: Shows a detailed list of all processes with Established TCP connections.
Psm: Show detailed module information from a specific process id (loaded modules, network connections e.g.).
Psh: Show detailed handle information from a specific process id (object handles, network connections e.g.).
Psw: Show Window titles from processes with active Windows.

Usage:
Download the Outflank-Ps-Tools folder and load the Ps-Tools.cna script within the Cobalt Strike Script Manager.
Use the Beacon help command to display syntax information.
This project is written in C/C++
You can use Visual Studio to compile the reflective dll's from source.

Credits
Author: Cornelis de Plaa (@Cneelis) / Outflank
Shout out to: Stan Hegt (@StanHacked) and all my other great colleagues at Outflank




via KitPloit

More information


  1. Hacking Tools Windows 10
  2. Hacking Tools Download
  3. Hack Tools For Windows
  4. Pentest Tools Linux
  5. Hack Apps
  6. Hacking Tools For Windows 7
  7. Best Hacking Tools 2019
  8. Hack Tools Download
  9. Beginner Hacker Tools
  10. Hack Tools
  11. Hacking Tools For Games
  12. Pentest Tools Website
  13. Hacker Tools List
  14. Termux Hacking Tools 2019
  15. Pentest Tools Free
  16. Hacking Tools
  17. What Is Hacking Tools
  18. Hacking Tools For Windows
  19. Hacking Tools For Windows 7
  20. Hacker Search Tools
  21. Pentest Tools Android
  22. Best Hacking Tools 2020
  23. Hacking Tools For Mac
  24. Pentest Tools Find Subdomains
  25. Hacker
  26. Best Hacking Tools 2019
  27. Hack Tools For Mac
  28. Hacking Tools Github
  29. Pentest Recon Tools

No comments:

Post a Comment