From 56a15a696e7e7d344f5dc06c4906b79d44705f19 Mon Sep 17 00:00:00 2001 From: Macarthur Inbody <133794m3r@gmail.com> Date: Mon, 9 Mar 2020 16:29:14 -0400 Subject: [PATCH] had an extra space on ih8ps enumerator's commented verison. --- ih8ps_service_injection_enumerator.ps1 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ih8ps_service_injection_enumerator.ps1 b/ih8ps_service_injection_enumerator.ps1 index a834c56..bce29b4 100644 --- a/ih8ps_service_injection_enumerator.ps1 +++ b/ih8ps_service_injection_enumerator.ps1 @@ -36,7 +36,7 @@ $services=(Get-ChildItem 'HKLM:\SYSTEM\CurrentControlSet\Services' | Get-ItemPro # 3) finds the string "Hector"(our user's name) in it. # If it doesn't we don't match anything. #> - $current_acl=(get-acl " HKLM:\SYSTEM\CurrentControlset\services\$service"| format-list | findstr "$user") + $current_acl=(get-acl "HKLM:\SYSTEM\CurrentControlset\services\$service"| format-list | findstr "$user") #Check to make sure that it has the word Full in it. if ($current_acl -match "Full"){ <#