MythicAgents / Apollo

A .NET Framework 4.0 Windows Agent
BSD 3-Clause "New" or "Revised" License
434 stars 90 forks source link

ppid, blockdlls, bug fixes, and documentation #52

Closed djhohnstein closed 2 years ago

djhohnstein commented 2 years ago

This PR adds two new commands, ppid and blockdlls which are used for post-ex evasion. Moreover, I finally tracked down the bug with sleep 0 and fork and run jobs, which now return output even when the processes are short lived. Last but not least, documentation updates have been given.