https://github.com/daschr/remsess_inject

Injects powershell commands into all running sessions (explorer.exe) of the current user.
https://github.com/daschr/remsess_inject

malware powershell windows

Last synced: 2 days ago
JSON representation

Injects powershell commands into all running sessions (explorer.exe) of the current user.

• Host: GitHub
• URL: https://github.com/daschr/remsess_inject
• Owner: daschr
• License: mit
• Created: 2024-05-21T15:49:09.000Z (9 months ago)
• Default Branch: main
• Last Pushed: 2024-07-24T12:50:13.000Z (7 months ago)
• Last Synced: 2024-07-24T14:44:31.425Z (7 months ago)
• Topics: malware, powershell, windows
• Language: Rust
• Homepage:
• Size: 14.6 KB
• Stars: 0
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
**DISCLAIMER**: I am not responsible for any type of damage caused by the use of this software in this repository. 

# Why?

Because it is pain to alter a users current RDP session from the outside of it.

# Usage

f.e `.\injector.exe "net use * \\192.168.1.1\Share1 s3cr3t /user:share1"`

# EDR flags it as malicious

That's right, because it does DLL injection. I will not give hints how to prevent it.