TheKevinWang

AAAAAAAA AAA AAAAAAAAA AAAAAAAAAAAA AAAAAAAAAAAAA AAAAAAAAAAAAAA AAAAAAAAAAAA AAA AAAAAAAAAAAAA AAA AAAAAAAAA AAAAAAAAAAAAA AAAAAA AAAAA AAAAAAAAAAAA AAAAAAA AAAAAAAA AAAAAAAAAAAAA AAAAAAAAA AAAAAAAAAA AAAAAAAAAAAAA AAAAAAAAAAAAAA AAAAAAAAA AAAAAAAAAA AAAAAAA AAAAAAAAAAAA AAAAAAAAAAAAAA AAAAAAA AAAAAAAAAAAAA AAAAAAAAAAAA AAAAAA AAAAAAAAAA AAAAAAAAAAAAA AAAAAA AAAAAAAA AAAAAAAAAAA AAAA AAAAAA AAAAAAAAAAAA AAAAAAAAAA AAAAAAAAAAAAAA AAAAAAAAAAA AAAAAAAA AAAAAAAAAAA AAAAAAA AAA AAAAA AAAAAA AAAAAAAAAAAA AAAAAAA AAAAAAAAAAAA AAAAAAAAAAA AAAAAAAAAAA AAAAAA AAAA AAAAA AAAAAAA AAAAAA AAAAAAAAAAAAAA AAAAAAAAA AAAAAAAA AAAAAAAAAAAAA AAAAAAA AAAAAAAA AAAAAAAAAAAAAA AAAAAAUE4ABA AAAAAF VM/AAAA AAQRwD GAAAAAA UE8AAA AAAAAAAAAA AAAAAAAAA AAAAAAAA AAAAAAAAAAAA AAAAAAAAAAAA AAAAAAA AAAA AAAAAAAAAAAAA AAAAAA AAAAA AAAAAAAAAAAAAA AAAA AAAAAAAAAA AAA AAAAAAAAAAAAAA AAAAAAAAAAA AAAAAAAAAA AAAAAAAAAAA AAAA AAAA AAAAAAAAAA AAAAA AAAA AAAAAAAAAAA AAAAAAAA AAAAAAAA AAAAAA AAAAAA AAAAA AAAAAA AAAAAAAAA AAA AAA AAA AAAAAAAA AAAAAAAAAA

TheKevinWang

import requests
import json
import time
import argparse
import getpass
import os
import sys


def main():

TheKevinWang

[System.Windows.Forms.Application]::EnableVisualStyles();
Add-Type -AssemblyName System.Windows.Forms
[System.Windows.Forms.MessageBox]::Show("failed", "status", "OK", "Error")

TheKevinWang

<# Takes an IMEI number, randomizes the SNR (unique identifier), calculates the check digit using Luhn algorithm, and returns the resulting IMEI.
#>
function Generate-IMEI([string] $seed) {
    #generate random SNR
    $str = ($seed.substring(0,8)+ [string](Get-Random -max 999999 -min 0) + $seed[14])
    $ca = $str.ToCharArray()
    $sum = 0 
    #calculate check digit
    for($i=0; $i -lt $ca.length-1; $i++) {
        $digit = [int]([string]$ca[$i])

TheKevinWang

rule Meterpreter { 
  meta: 
    author = "Kevin Wang" 
    description = "Meterpreter reverse shell in memory detecter." 
  strings: 
    $a = "metsrv.dll"
    $b = "stdapi_" 
    $c = "priv_fs"
  condition: 
    $a and $b and $c

TheKevinWang

#Works on Windows 10 1803. Requires admin privileges.

#Disable Powershell 2.0 and 1.0
dism /online /disable-feature /FeatureName:MicrosoftWindowsPowerShellV2Root
dism /online /disable-feature /FeatureName:MicrosoftWindowsPowerShellV2

#Enable Powershell 2.0 and 1.0
dism /online /enable-feature /FeatureName:MicrosoftWindowsPowerShellV2Root
dism /online /enable-feature /FeatureName:MicrosoftWindowsPowerShellV2

TheKevinWang

([ADSI]"WinNT://$env:COMPUTERNAME").Children | ? {$_.SchemaClassName -eq 'user'} | ft name,lastlogin,description

TheKevinWang

using System;
using System.Collections.Generic;
using System.Text;
using System.CodeDom.Compiler;
using Microsoft.CSharp;
using System.IO;
using System.Reflection;
namespace InMemoryCompiler
{
    class Program

TheKevinWang

Option Explicit
Public WithEvents oApp As Word.Application
Private Sub oApp_DocumentBeforeClose(ByVal Doc As Document, Cancel As Boolean)
Cancel = True
Application.Quit SaveChanges:=wdDoNotSaveChanges
End Sub

TheKevinWang

Option Explicit
Dim oAppClass As New oAppClass
Public Sub AutoOpen()
ActiveDocument.Sections(1).Range.Font.Hidden = False
Set page1 = Selection.GoTo(What:=1, Which:=2, Name:=1).Bookmarks("\Page").Range
page1.Delete
Set oAppClass.oApp = Word.Application
End Sub