Skip to content

Conversation

@SnowWhite1129
Copy link

Original version of KrbRelayUp could only spawn cmd.exe with a new window.
I modify the spawn process to make it more pratical in attack scenarios.

Now, it can spawn a powershell or other executable files in bin path like this.
./KrbRelayUp.exe spawn -m rbcd -d <domain> -dc <server_name> -cn <computer_name> -cp <computer_password> -sc "powershell.exe tasklist > C:\Windows\Temp\tasklist.txt"

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants