diff --git a/README.md b/README.md index 395f24b..fd043db 100644 --- a/README.md +++ b/README.md @@ -11,9 +11,10 @@ An alternative screenshot capability for Cobalt Strike that uses WinAPI and does 1. import the screenshotBOF.cna script into Cobalt Strike 2. use the command screenshot_bof {local filename} {save method 0/1} -Save methods: +## Save methods: 0. drop file to disk 1. download file over beacon (Cobalt Strike only) + ``` beacon> screenshot_bof sad.bmp 1 [*] Running screenshot BOF by (@codex_tf2)