1mm0rt41PC’s gists

1mm0rt41PC / RemoteShadowRdpWithLaps.ps1

Last active March 7, 2025 09:56

	#############################################################
	# RDP Session Management with LAPS
	#
	# Author: Claude
	# Date: March 6, 2025
	# Version: 1.1
	#
	# Description:
	# This script provides a GUI for managing RDP connections using LAPS passwords.
	# It retrieves LAPS credentials from Active Directory, establishes RDP connections,

1mm0rt41PC / pent-tail.ps1

Created May 14, 2024 10:35

	$l=curl.exe -k -L https://pkgs.tailscale.com/stable/ 2>$null \| out-string \| Select-String -Pattern '"tailscale-setup-([0-9\.]+)-amd64.msi"'
	$version = $l.Matches[0].Groups[1].Value

	$output="C:\Windows\Temp"
	rm -Force -ErrorAction SilentlyContinue "$output\tailscale."
	curl.exe -A "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" -L https://pkgs.tailscale.com/stable/tailscale-setup-${version}-amd64.msi --output $output\tailscale-setup-latest.msi 2>$null
	msiexec.exe /a "$output\tailscale-setup-latest.msi" /qb 'TARGETDIR="$output"' /quiet
	ping -n 10 127.0.0.1
	rm -Force -ErrorAction SilentlyContinue "$output\tailscale-setup-latest.msi"

1mm0rt41PC / tailscale_install.ps1

Last active November 11, 2024 14:44

This script allows Tailscale install even in a hardened context where WPAD service is disabled

	sc.exe stop tailscale
	killall /f /im tailscale.exe
	killall /f /im tailscale-ipn.exe
	killall /f /im tailscaled.exe
	sc.exe delete tailscale
	rm -Force -Recurse -ErrorAction SilentlyContinue "C:\Program Files\Tailscale"

	$l=curl.exe -k -L https://pkgs.tailscale.com/stable/ \| out-string \| Select-String -Pattern '"tailscale-setup-([0-9\.]+)-amd64.msi"'
	$version = $l.Matches[0].Groups[1].Value

1mm0rt41PC / rusthound_build.sh

Created October 30, 2023 22:00

	cat <<'EOD' \| docker run -i --rm -v ./:/code rust:slim-buster bash
	apt-get update && apt-get install -y curl gcc clang libclang-dev libgssapi-krb5-2 libkrb5-dev libsasl2-modules-gssapi-mit musl-tools gcc-mingw-w64-x86-64
	curl https://sh.rustup.rs -sSf \| sh -s -- -y
	source "/usr/local/cargo/env"
	cd /code

	export targetbuild='x86_64-unknown-linux-gnu';
	echo '##########################################################################'
	echo -e "\033[34m$targetbuild\033[0m"
	rustup install stable-$targetbuild --force-non-host

1mm0rt41PC / userDefineLang_Cypher_dark.xml

Last active May 23, 2023 14:28 — forked from cbonesana/userDefineLang_Cypher_dark.xml

A Cypher syntax highlighter for Notepad ++ with colors for a dark theme.

	<NotepadPlus>
	<UserLang name="Cypher" ext="cypher" udlVersion="2.1">
	<Settings>
	<Global caseIgnored="yes" allowFoldOfComments="yes" foldCompact="no" forcePureLC="0" decimalSeparator="0" />
	<Prefix Keywords1="no" Keywords2="no" Keywords3="no" Keywords4="no" Keywords5="no" Keywords6="no" Keywords7="no" Keywords8="no" />
	</Settings>
	<KeywordLists>
	<Keywords name="Comments">00// 01 02 03// 04</Keywords>
	<Keywords name="Numbers, prefix1"></Keywords>
	<Keywords name="Numbers, prefix2"></Keywords>

1mm0rt41PC / RegSecurityCheck.ps1

Last active February 10, 2023 16:40


	$tests = @'
	{
	"RDP server configuration": {
	"Hive": {
	"HKLM\\SOFTWARE\\Policies\\Microsoft\\Windows NT\\Terminal Services": {
	"KeepAliveInterval": "DWord:1",
	"DeleteTempDirsOnExit": "DWord:1",
	"SecurityLayer": "DWord:2",
	"UserAuthentication": "DWord:1",

1mm0rt41PC / DeployOffice2019.ps1

Last active January 25, 2023 22:11

DeployOffice2019

	# iwr https://gist.githubusercontent.com/1mm0rt41PC/6c5f758f7010561450ce48ae389be5f3/raw/DeployOffice2019.ps1 \| out-string \| iex
	#choco.exe install -y office2019proplus --params "/Language:fr-FR"


	function install_office2019( $key ){
	$url = 'https://download.microsoft.com/download/2/7/A/27AF1BE6-DD20-4CB4-B154-EBAB8A7D4A7E/officedeploymenttool_15928-20216.exe'
	$checksum = '12B4CF116CA332C59BABC9A99EF6505BB659EA7623E6F1A71AF04F47A772A8DB'
	$conf = @'
	<Configuration>
	<Add OfficeClientEdition="64" Channel="PerpetualVL2019" AllowCdnFallback="True">

1mm0rt41PC / WindowsUpdate.ps1

Last active October 13, 2022 12:01 — forked from srz-zumix/WindowsUpdate.ps1

WindowsUpdate powershell

	$x=get-date
	# Condition d'execution
	if( $x.Day -lt 2 ){
	Write-Host "Update not allowed the 1 and 2 of each month"
	exit
	}
	if( $x.DayOfWeek -eq [System.DayOfWeek]::Monday ){
	Write-Host "Update not allowed Monday"
	exit
	}

1mm0rt41PC / wireguard-generator.sh

Last active April 24, 2022 21:22

Wireguard Quick Generator

	#!/bin/bash
	apt-get install wireguard qrencode wireguard-dkms -y
	modprobe wireguard
	lsmod \| grep wireguard

	mkdir -p /etc/wireguard
	wg-quick down wg0 2>&1 >/dev/null

	export wg_key=`wg genkey`
	export wg_psk=`wg genkey`

1mm0rt41PC / New-GPOSchTask.ps1

Last active November 23, 2022 15:10

Create ScheduledTasks in GPO via command line

1mm0rt41PC 1mm0rt41PC