Saltinbank-SyS

Today, after working with Windows for over 15 years now, I finally came across the solution to the 
dreadfull BSOD STOP 0x0000007B after replacing the motherboard of a computer, or after moving the 
harddrive to another computer, or after doing a P2V, or after ... you get the point.

Requirements:
- Windows install / boot CD
- Chipset / Mobo / Storage drivers of the new motherboard or storage controller

Steps:
- extract all the drivers to a USB thumb drive

Saltinbank-SyS

Install

launch a new ubuntu image

Docker

docker run -i -t ubuntu /bin/bash
apt-get update
apt-get install ssss

Saltinbank-SyS

Red Teaming tool

BIG SHOUT OUT TO ZORS /./ ONE LUV

• General usefull Powershell Scripts
• AMSI Bypass restriction Bypass
• Payload Hosting
• Network Share Scanner
• Lateral Movement
• Reverse Shellz
• POST Exploitation

Saltinbank-SyS

Saltinbank-SyS

# -*- coding: utf-8 -*-
import hashlib
import base64
import requests, string, struct, uuid, random, re
import sys
from collections import OrderedDict
from sys import version
from urllib3.exceptions import InsecureRequestWarning
requests.packages.urllib3.disable_warnings(category=InsecureRequestWarning)
# too lazy to deal with string <-> bytes confusion in python3 so forget it ¯\_(ツ)_/¯

Saltinbank-SyS

From: http://redteams.net/bookshelf/
Techie

    Unauthorised Access: Physical Penetration Testing For IT Security Teams by Wil Allsopp.
    Social Engineering: The Art of Human Hacking by Christopher Hadnagy
    Practical Lock Picking: A Physical Penetration Tester's Training Guide by Deviant Ollam
    The Art of Deception: Controlling the Human Element of Security by Kevin Mitnick
    Hacking: The Art of Exploitation by Jon Erickson and Hacking Exposed by Stuart McClure and others.
    Nmap Network Scanning: The Official Nmap Project Guide to Network Discovery and Security Scanning by Fyodor
    The Shellcoder's Handbook: Discovering and Exploiting Security Holes by several authors

Saltinbank-SyS

#!/usr/bin/env python -i

"""
To use:

```
$ python -i ProcLaunchMon.py
>>> sess
```

Saltinbank-SyS

# Steps needed to disable DeviceGuard with UEFI lock

# Disable DeviceGuard in registry
cmd /c 'REG DELETE "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" /v "EnableVirtualizationBasedSecurity" /f'
cmd /c 'REG DELETE "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" /v "RequirePlatformSecurityFeatures" /f'
cmd /c 'REG DELETE "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard" /v "EnableVirtualizationBasedSecurity" /f'
cmd /c 'REG DELETE "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard" /v "RequirePlatformSecurityFeatures" /f'

# Change UEFI settings. Reboot and confirmation needed.
mountvol X: /s