search

optiv / ScareCrow

ScareCrow - Payload creation framework designed around EDR bypass.
2.71k stars 503 forks source link

Adding sandboxDomain flag #59

Closed ptr0x1 closed 2 years ago

ptr0x1 commented 2 years ago

Update to the underlying code to add an extra evasion option where the code only runs on domain-joined machines where the domain matches the supplied argument.

ptr0x1 commented 2 years ago

Whoops, I accidentally added this pull request here too, my apologies! It's a very hacky addition but let me know if you're interested in adding it and I can send a pull request once it is cleaned up.