Ares-mythic/documentation-payload/ares/commands/screenshot_inject.md at b88b3a218456c39e6473c906213df5b3d2b565c1

mirror of https://github.com/Aryma-f4/Ares-mythic.git synced 2026-06-12 21:44:12 +00:00

Files

Aryma 03d283cf49 refactor(payload): rename apollo to ares and update documentation

This commit renames the Apollo payload type to Ares, moving all associated files and updating documentation accordingly. The change includes:
- Renaming directories from `apollo` to `ares`
- Updating documentation image references
- Maintaining the same code functionality while changing the payload name
- Adding new Ares-specific documentation files
- Removing old Apollo documentation files

The rename is done to reflect the new payload name while preserving all existing functionality.

2026-04-14 14:02:44 +07:00

822 B

Raw Blame History

+++ title = "screenshot" chapter = false weight = 103 hidden = false +++

{{% notice info %}} Artifacts Generated: Process Inject {{% /notice %}}

Summary

Take a screenshot of the desktop session associated with the target process.

Arguments

PID

The process to inject the screenshot assembly into.

Count

How many screenshots to take. Default: 1

Interval

Amount of time (in seconds) to wait between screenshots being taken. Default: 0

Usage

screenshot_inject -PID [pid] -Count [count] -Interval [interval]

MITRE ATT&CK Mapping

T1113

Special Thanks

Reznok wrote the Apollo 1.X version of this module. You can find him at the following:

Social	Handle
Github	https://github.com/reznok
Twitter	@reznok
BloodHoundGang Slack	@reznok

822 B Raw Blame History