docker pull kalilinux/kali-linux-docker
| MIT License | |
| Copyright (c) 2021 Daniel Ethridge | |
| Permission is hereby granted, free of charge, to any person obtaining a copy | |
| of this software and associated documentation files (the "Software"), to deal | |
| in the Software without restriction, including without limitation the rights | |
| to use, copy, modify, merge, publish, distribute, sublicense, and/or sell | |
| copies of the Software, and to permit persons to whom the Software is | |
| furnished to do so, subject to the following conditions: |
| #region Attack validations | |
| wmic /node:169.254.37.139 /user:Administrator /password:badpassword process call create notepad.exe | |
| Invoke-WmiMethod -ComputerName 169.254.37.139 -Credential Administrator -Class Win32_Process -Name Create -ArgumentList notepad.exe | |
| $CimSession = New-CimSession -ComputerName 169.254.37.139 -Credential Administrator | |
| Invoke-CimMethod -CimSession $CimSession -ClassName Win32_Process -MethodName Create -Arguments @{ CommandLine = 'notepad.exe' } | |
| $CimSession | Remove-CimSession | |
| winrm --% invoke Create wmicimv2/Win32_Process @{CommandLine="notepad.exe"} -remote:169.254.37.139 -username:Administrator -password:badpassword |
| // IMPORTANT | |
| using System.Text; | |
| // This gist was created thanks to this comment from Alexander on StackOverflow: | |
| // https://stackoverflow.com/questions/249087/how-do-i-remove-diacritics-accents-from-a-string-in-net#comment86833005_34272324 | |
| // This is a derivative work. The logic of this function comes from a switch statement found inside the | |
| // Lucene.Net library. The documentation of the conversion of characters is quite impressive | |
| // (thank you @NightOwl888 and @synhershko !!!): | |
| // https://github.com/apache/lucenenet/blob/master/src/Lucene.Net.Analysis.Common/Analysis/Miscellaneous/ASCIIFoldingFilter.cs |
| let valid_logons = (OfficeActivity | |
| | where TimeGenerated > ago(30d) | |
| | where Operation == 'UserLoggedIn' | |
| | summarize by ClientIP); | |
| let only_invalid_logons = (OfficeActivity | |
| | where TimeGenerated > ago(30d) | |
| | where Operation == 'UserLoginFailed' | |
| | summarize by ClientIP) | |
| | join kind=anti (valid_logons) on ClientIP; | |
| OfficeActivity |
| ; | |
| ; the "monitor ROM" of an apple 1 fit in one page (256 bytes). | |
| ; | |
| ; this is my attempt to take the disassembled code, give names to the | |
| ; variables and routines, and try to document how it worked. | |
| ; | |
| ; | |
| ; an apple 1 had 8KB of RAM (more, if you hacked on the motherboard), and a | |
| ; peripheral chip that drove the keyboard and video. the video was run by a | |
| ; side processor that could treat the display as an append-only terminal that |
| import time, string, sys | |
| from pynput.keyboard import Key, Controller | |
| kb = Controller() | |
| shift_keys = { | |
| '<' : ',', | |
| ':' : ';', | |
| '>' : '.', | |
| '+' : '=', |
| Windows Registry Editor Version 5.00 | |
| [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\BackgroundAccessApplications\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy] | |
| "Disabled"=dword:00000001 | |
| [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager] | |
| "SubscribedContent-338388Enabled"=dword:00000000 | |
This is a compiled list of falsehoods programmers tend to believe about working with time.
Don't re-invent a date time library yourself. If you think you understand everything about time, you're probably doing it wrong.