Skip to content

Latest commit

 

History

History
29 lines (20 loc) · 683 Bytes

README.md

File metadata and controls

29 lines (20 loc) · 683 Bytes

"Microsoft Windows" Problem Steps Recorder

  • Title: Win_ProblemStepsRecorder
  • Author: TW-D
  • Version: 1.0
  • Target: Microsoft Windows
  • Category: Credentials

Description

  1. Partially avoids "PowerShell Script Block Logging".
  2. Closing of all windows.
  3. Hide "PowerShell" window.
  4. Abuse of "Windows Problem Steps Recorder" to spy on a user's activities.
  5. Writes the file system cache to disk.
  6. Safely eject.

Configuration

From "payload.txt" change the values of the following constants :

######## INITIALIZATION ########

readonly BB_LABEL="BashBunny"
readonly RECORDER_TIME=300