docker pull kalilinux/kali-linux-docker
MIT License | |
Copyright (c) 2021 Daniel Ethridge | |
Permission is hereby granted, free of charge, to any person obtaining a copy | |
of this software and associated documentation files (the "Software"), to deal | |
in the Software without restriction, including without limitation the rights | |
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell | |
copies of the Software, and to permit persons to whom the Software is | |
furnished to do so, subject to the following conditions: |
#region Attack validations | |
wmic /node:169.254.37.139 /user:Administrator /password:badpassword process call create notepad.exe | |
Invoke-WmiMethod -ComputerName 169.254.37.139 -Credential Administrator -Class Win32_Process -Name Create -ArgumentList notepad.exe | |
$CimSession = New-CimSession -ComputerName 169.254.37.139 -Credential Administrator | |
Invoke-CimMethod -CimSession $CimSession -ClassName Win32_Process -MethodName Create -Arguments @{ CommandLine = 'notepad.exe' } | |
$CimSession | Remove-CimSession | |
winrm --% invoke Create wmicimv2/Win32_Process @{CommandLine="notepad.exe"} -remote:169.254.37.139 -username:Administrator -password:badpassword |
// IMPORTANT | |
using System.Text; | |
// This gist was created thanks to this comment from Alexander on StackOverflow: | |
// https://stackoverflow.com/questions/249087/how-do-i-remove-diacritics-accents-from-a-string-in-net#comment86833005_34272324 | |
// This is a derivative work. The logic of this function comes from a switch statement found inside the | |
// Lucene.Net library. The documentation of the conversion of characters is quite impressive | |
// (thank you @NightOwl888 and @synhershko !!!): | |
// https://github.com/apache/lucenenet/blob/master/src/Lucene.Net.Analysis.Common/Analysis/Miscellaneous/ASCIIFoldingFilter.cs |
let valid_logons = (OfficeActivity | |
| where TimeGenerated > ago(30d) | |
| where Operation == 'UserLoggedIn' | |
| summarize by ClientIP); | |
let only_invalid_logons = (OfficeActivity | |
| where TimeGenerated > ago(30d) | |
| where Operation == 'UserLoginFailed' | |
| summarize by ClientIP) | |
| join kind=anti (valid_logons) on ClientIP; | |
OfficeActivity |
; | |
; the "monitor ROM" of an apple 1 fit in one page (256 bytes). | |
; | |
; this is my attempt to take the disassembled code, give names to the | |
; variables and routines, and try to document how it worked. | |
; | |
; | |
; an apple 1 had 8KB of RAM (more, if you hacked on the motherboard), and a | |
; peripheral chip that drove the keyboard and video. the video was run by a | |
; side processor that could treat the display as an append-only terminal that |
import time, string, sys | |
from pynput.keyboard import Key, Controller | |
kb = Controller() | |
shift_keys = { | |
'<' : ',', | |
':' : ';', | |
'>' : '.', | |
'+' : '=', |
Windows Registry Editor Version 5.00 | |
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\BackgroundAccessApplications\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy] | |
"Disabled"=dword:00000001 | |
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager] | |
"SubscribedContent-338388Enabled"=dword:00000000 | |
This is a compiled list of falsehoods programmers tend to believe about working with time.
Don't re-invent a date time library yourself. If you think you understand everything about time, you're probably doing it wrong.