Green-m Green-m

I hereby claim:

To claim this, I am signing this object:

	# from https://gist.github.com/stek29/8a7ac0e673818917525ec4031d77a713

	import sqlite3
	import io
	import struct
	import enum
	import mmh3
	import pprint
	import datetime

	# install pycryptodome or pycryptodomex
	# pip install mmh3 pycryptodome pycryptodomex
	# From https://gist.github.com/stek29/8a7ac0e673818917525ec4031d77a713

	import os
	import sqlite3
	import io
	import struct
	import enum
	import mmh3

	Dim objResult

	Set objShell = WScript.CreateObject("WScript.Shell")

	Do While True
	objResult = objShell.sendkeys("{NUMLOCK}{NUMLOCK}")
	Wscript.Sleep (6000)
	Loop

	#!/usr/bin/env bash
	PATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin:~/bin
	export PATH
	#===================================================================#
	# System Required: Debian or Ubuntu #
	# Description: Install Shadowsocks-libev server for Debian/Ubuntu #
	# Author: Teddysun <[email protected]> #
	# Thanks: @madeye <https://github.com/madeye> #
	# Intro: https://teddysun.com/358.html #
	#===================================================================#

	function Subvert-CLRAntiMalware {
	<#
	.SYNOPSIS

	A proof-of-concept demonstrating overwriting a global variable that stores a pointer to an antimalware scan interface context structure. This PoC was only built to work with .NET Framework Early Access build 3694.

	.DESCRIPTION

	clr.dll in .NET Framework Early Access build 3694 has a global variable that stores a pointer to an antimalware scan interface context structure. By reading the pointer at that offset and then overwriting the forst DWORD, the context structure will become corrupted and subsequent scanning calls will fail open.


	#include <stdlib.h>
	#include <stdio.h>
	#include <string.h>
	#include <windows.h>

	#define SERVICE_NAME "DhcXrk"
	#define DISPLAY_NAME "QyucjlZIin"
	#define RETRY_TIME 5