diff --git a/README.md b/README.md index 770e091..f9bb6dd 100644 --- a/README.md +++ b/README.md @@ -6,6 +6,8 @@ This technique doesn't rely on any external tools and doesn't require a Microsof It spawns an `NT Authority/System` process using the Microsoft Windows Task Scheduler then upgrade to Interactive System Process using cool WinApi's (Run in Active Windows Session) +![demo](https://user-images.githubusercontent.com/2520298/155295069-3c916877-e5c9-4e8d-a6dd-f13cb3d15f52.png) + --- ## Install