SessionGopher
Description
SessionGopher is a PowerShell tool that finds and decrypts saved session information for remote access tools. It has WMI functionality built in so it can be run remotely. Its best use case is to identify systems that may connect to Unix systems, jump boxes, or point-of-sale terminals.
Names
| Name |
|---|
| SessionGopher |
Category
Tools
Type
- Credential stealer
Information
Other Information
Uuid
b5341898-0eab-48d9-897b-208caed2fbc7
Last Card Change
2020-06-24