ssstonebraker

Note: I did not author this, i found it somehwere.

Active Directory Attacks

Summary

• Tools
• Most common paths to AD compromise
  • MS14-068 (Microsoft Kerberos Checksum Validation Vulnerability)
  • Open Shares
• [GPO - Pivoting with Local Admin

0xhexmex

// Example below is with mitm6 (https://github.com/fox-it/mitm6/)

// Note: Adding the '--add-binary' option here is specific to mitm6, not required in all cases.

# pip install pyinstaller
# pyinstaller --clean -F --add-binary="/usr/lib/x86_64-linux-gnu/libpython2.7.so.1.0:." ./mitm6.py

// The step above will create a single binary in the ./dist/ directory called mitm6

// Install staticx and dependencies

M0r13n

  <form action="" method="POST" role="form" class="form">
            {{ form.hidden_tag() }}
            <!--Other fields-->
            {{ wtf.form_field(form.tags, placeholder='audio, hardware, chip') }}
            <button class="btn btn-success" type="submit">submit</button>
  </form>

spencer-p

Coding Golf Shell

This is a fully functional UNIX shell implemented in minimal bytes. You may have to disable some compiler warnings to compile it.

Feature Set

• Execution of single commands as expected
• Piping commands arbitrarily with |
• Redirecting both standard input and output with < and > respectively

lukassup

Python zipapp web apps

What's a zipapp?

This concept is very much like .jar or .war archives in Java.

NOTE: The built .pyz zipapp can run on both Python 2 & 3 but you can only build .pyz zipapps with Python 3.5 or later.

Initial setup

mainframed

#!/bin/bash
#
# Heavily Modified from: https://www.dosbox.com/wiki/PPP_configuration_on_linux_host
#
# Usage:
# sudo ./isp.sh
#
# This script makes it so you can browse the net with DOSBox and Trumpet Winsock in
# Windows 3.11
#

max-mapper

eXenon

#!/usr/bin/python2

"""
    Use scapy to modify packets going through your machine.
    Based on nfqueue to block packets in the kernel and pass them to scapy for validation
"""

import nfqueue
from scapy.all import *
import os

PierreZ

#configuration of router
	conf t
	hostname ""
	enable secret ""
	line console 0
	logging synchronous
	password ""
	login
	exit
	line vty 0 4

jamiees2

# Enter your code here. Read input from STDIN. Print output to STDOUT
class Node:
    def __init__(self,value,point):
        self.value = value
        self.point = point
        self.parent = None
        self.H = 0
        self.G = 0
    def move_cost(self,other):
        return 0 if self.value == '.' else 1