Syed Umar Arfeen Anon-Exploiter

Chat GPT "DAN" (and other "Jailbreaks")

Here, I'll show you how to compile Frida for both rootfull and rootless jailbreaks.

TL;DR

~~On Dopamine/Fugu15 Max or palera1n you can add my repo (open the link in your favorite browser on your jailbroken iDevice).~~

~~The DEBs you will install are build using the following instructions.~~

Update 2024-02-29

Revert to WSL 1 from WSL 2

I'll spare everyone the rant. This gist will be an all business how to revert to WSL (Windows Subsystem for Linux) on Windows 10 from version 2 back to version 1.

Note that enabling Hyper-V destabilized the (highly managed) system my company provides me. This is probably unique to the image used for the machine and the updates that base has received. So I'm not surprised by the issues people are having with Hyper-V and the Virtual Machine Platform.

My personal Windows virtual machines remain on WSL 1 because I just don't have the energy to deal with all the drama when I've already put in a full shift at work.

	#!/bin/bash
	# The following commands should install openvpn3 successfully on Kali Linux as of 2023-10-11
	# Please check libssl1.1 version is newest at https://packages.debian.org/bullseye/amd64/libssl1.1
	# PM me if broken and I will update

	# Thanks to the following for bug reports / additions
	# asingh-lp, Pyr0technicien

	# update packages
	sudo apt update

	#Thank you @NotMedic for troubleshooting/validating stuff!

	$password = Read-Host -Prompt "Enter Password"
	#^^ Feel free to hardcode this for running in a beacon/not retyping it all the time!

	$server = "admin" #This will just decide the name of the cert request files that are created. I didn't want to change the var name so it's server for now.
	$CERTPATH = "C:\Users\lowpriv\Desktop\" #Where do you want the cert requests to be stored?
	$CAFQDN = "dc01.alexlab.local" #hostname of underlying CA box.
	$CASERVER = "alexlab-dc01-ca" #CA name.
	$CA = $CAFQDN + "\" + $CASERVER

	#Thank you @NotMedic for troubleshooting/validating stuff!

	$password = Read-Host -Prompt "Enter Password"
	#^^ Feel free to hardcode this for running in a beacon/not retyping it all the time!

	$server = "admin" #This will just decide the name of the cert request files that are created. I didn't want to change the var name so it's server for now.
	$CERTPATH = "C:\Users\lowpriv\Desktop\" #Where do you want the cert requests to be stored?
	$CAFQDN = "dc01.alexlab.local" #hostname of underlying CA box.
	$CASERVER = "alexlab-dc01-ca" #CA name.
	$CA = $CAFQDN + "\" + $CASERVER

	# in addition to the profile, a stage0 loader is also required (default generated payloads are caught by signatures)
	# as stage0, remote injecting a thread into a suspended process works

	set host_stage "false";
	set useragent "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36 Edg/96.0.1054.62";
	set sleeptime "10000";

	stage {
	set allocator "MapViewOfFile";
	set name "notevil.dll";

	#!/bin/bash

	#author : Raul Calvo Laorden ([email protected])
	#description : Script to get WPA-EAP Identities, EAP certs, HTTP passwords, Handshakes, DNS queries, NBTNS queries and LLMNR queries
	#date : 2021-06-24
	#usage : bash pcapFilter.sh -f <pcap/folder> [options]
	#-----------------------------------------------------------------------------------------------------------

	red=`tput setaf 1`
	green=`tput setaf 2`

	CACHE_INFO: 127.0.0.1
	CF_CONNECTING_IP: 127.0.0.1
	CF-Connecting-IP: 127.0.0.1
	CLIENT_IP: 127.0.0.1
	Client-IP: 127.0.0.1
	COMING_FROM: 127.0.0.1
	CONNECT_VIA_IP: 127.0.0.1
	FORWARD_FOR: 127.0.0.1
	FORWARD-FOR: 127.0.0.1
	FORWARDED_FOR_IP: 127.0.0.1

	Description: JsonPickle 1.4.2 allows remote code execution during deserialization of a malicious payload through the decode() function.

	VulnerabilityType: CWE-502: Deserialization of Untrusted Data

	Vendor of Product: https://github.com/jsonpickle/jsonpickle

	Affected Product Code Base: JsonPickle Python Module
	Attack Type: Remote

	Impact Code execution : True