0xa-saline

import requests
import time
import sys
from base64 import b64encode
from requests_ntlm2 import HttpNtlmAuth
from urllib3.exceptions import InsecureRequestWarning
from urllib import quote_plus

requests.packages.urllib3.disable_warnings(category=InsecureRequestWarning)

0xa-saline

using System;
using System.Collections.Generic;
using System.Management;
using System.DirectoryServices;
using System.DirectoryServices.ActiveDirectory;
using System.Text;
using System.Runtime.Serialization.Formatters.Binary;
using System.IO;
using System.Collections;
using System.Runtime.InteropServices;

0xa-saline

function Invoke-SMBShellcodeLoad {
    <#
    .SYNOPSIS
    Short description
    
    .DESCRIPTION
    Long description
    
    .EXAMPLE
    An example

0xa-saline

#!/usr/bin/env python3

import re
import sys
import base64
from hashlib import sha256
from binascii import hexlify, unhexlify
from Crypto.Cipher import AES
from xml.dom import minidom
from pprint import pprint

0xa-saline

using System;
using System.Collections.Generic;
using System.Runtime.InteropServices;
using System.Text;

namespace Hollowing
{
    public class Loader
    {
        public static byte[] target_ = Encoding.ASCII.GetBytes("calc.exe");

0xa-saline

package main

//#include "dllmain.h"
import "C"

0xa-saline

package main

import (
	"io/ioutil"
	"os"
	"os/exec"
	"strconv"
	"syscall"

0xa-saline

package main

import (
	"bytes"
	"fmt"
	"os/exec"
	"strings"
)

// PowerShell struct

0xa-saline

using System;
using System.Diagnostics;
using System.IO;
using System.Runtime.InteropServices;

namespace DinjectorWithQUserAPC
{


    public class Program

0xa-saline

# On Windows, within a VS developer prompt

# Dump the exports of msvcrt.dll 
dumpbin.exe /exports C:\Windows\System32\msvcrt.dll > msvcrt.txt

# Copy msvcrt.txt to a Linux box

# Convert the file to Unix line endings
dos2unix msvcrt.txt