Sissel Siss3l

This downloads standalone MSVC compiler, linker & other tools, also headers/libraries from Windows SDK into portable folder, without installing Visual Studio. Has bare minimum components - no UWP/Store/WindowsRT stuff, just files & tools for native desktop app development.

Run py.exe portable-msvc.py and it will download output into msvc folder. By default it will download latest available MSVC & Windows SDK - currently v14.40.33807 and v10.0.26100.0.

You can list available versions with py.exe portable-msvc.py --show-versions and then pass versions you want with --msvc-version and --sdk-version arguments.

To use cl.exe/link.exe first run setup_TARGET.bat - after that PATH/INCLUDE/LIB env variables will be updated to use all the tools as usual. You can also use clang-cl.exe with these includes & libraries.

To use clang-cl.exe without running setup.bat, pass extra /winsysroot msvc argument (msvc is folder name where output is stored).

KrbRelay with RBCD Privilege Escalation HOWTO

Short HOWTO about one use case of the work from Cube0x0 (KrbRelay) and others.

TL;DR

No-Fix Local Privilege Escalation from low-priviliged domain user to local system on domain-joined computers.

Prerequisites:

LDAP signing not required on Domain Controller (default!)

Solution to Adepts of 0xCC Challenge 01

Authors: @kachakil and @samsa2k8

Summary

A PHP challenge where all source code, configuration and Docker files were provided at: https://github.com/Adepts-Of-0xCC/CHALLENGE-01

The target machine (containing the real flag) was available at: http://challenge01.adepts.of0x.cc/

Mermaid on Github Examples

All of these diagrams are dynamically rendered during html display by Github, the images generated from text inside the Github-Flavored Markdown. None are static images. Mermaid support was released for Github on 2022-02-14

Pros & Cons:

Pro: You don't need to care about the layout.
Con: You cannot control the layout.

Notes:

Not all the features of Mermaid (in particular symbols B-->C[fa:fa-ban forbidden], hyperlink and tooltips) are supported by Github.

This gist has now been 'deprecated' and has moved...

... to my blog style space for easier contribution by third parties and to provide what I believe to be an easier reading experience. Please field all enquiries and issues to the source repository.

	#!/usr/bin/env python

	# Find the raw bitstring from a captured Flipper RAW .sub file.
	# Must provide the bitlength in ms, and the allowable error which can be tolerated.

	import re
	import sys
	import math

	filename = sys.argv[1]

	// ==UserScript==
	// @name osu! Logo template
	// @namespace http://tampermonkey.net/
	// @version 0.6
	// @description try to take over the canvas!
	// @author oralekin, LittleEndu, ekgame, Wieku, DeadRote
	// @match https://hot-potato.reddit.com/embed*
	// @icon https://www.google.com/s2/favicons?sz=64&domain=reddit.com
	// @grant none
	// ==/UserScript==

	"""
	Train a neural network to learn an FIR filter.

	Created on Fri Aug 3 15:00:40 2018
	"""
	from tensorflow.keras.models import Sequential
	from tensorflow.keras.layers import Dense
	from tensorflow.keras.callbacks import Callback
	import numpy as np
	from scipy import signal

	https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/ukraine-wiper-malware-russia
	https://www.sentinelone.com/labs/hermetic-wiper-ukraine-under-attack/
	https://twitter.com/juanandres_gs/status/1496581710368358400?s=20&t=ceSYl9EWREXS0ELncl4grA
	https://twitter.com/0xAmit/status/1496641159371837444?s=20&t=BGgh4TA4xPH1SbmShMkULw
	https://twitter.com/JusticeRage/status/1496894253376720901?s=20&t=j42L_Y0O-Q2-oTI3YEcSZw
	https://securityintelligence.com/posts/new-destructive-malware-cyber-attacks-ukraine/
	https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-fscc/a82e9105-2405-4e37-b2c3-28c773902d85
	https://docs.microsoft.com/en-us/windows/win32/devnotes/attribute-list-entry
	https://twitter.com/Lexsek_/status/1496806942630633475?s=20&t=BGgh4TA4xPH1SbmShMkULw
	https://www.cisa.gov/uscert/ncas/alerts/aa22-057a

	Question Real Guess Correct? RelErr Digits
	What is 18857 - 592? 18265 18265 Yes 0.0% 5/5
	What is 30752 - 3087? 27665 27365 No 1.1% 4/5
	What is 2241 + 19873? 22114 22114 Yes 0.0% 5/5
	What is 5412 + 10169? 15581 15581 Yes 0.0% 5/5
	What is 11831 - 9178? 2653 3153 No 18.8% 2/4
	What is 1701 * 19933? 33906033 33953373 No 0.1% 4/8
	What is 11648 + 17851? 29499 30509 No 3.4% 1/5
	What is 29253 - 6202? 23051 22151 No 3.9% 3/5
	What is 27365 + 24989? 52354 53554 No 2.3% 3/5