timhughes

"""
Usage:

Make sure that redis is running on localhost (or adjust the url)
Install uvicorn or some other asgi server https://asgi.readthedocs.io/en/latest/implementations.html

    pip install -u uvicorn

Install dependencies

Neo23x0

Base64 Patterns - Learning Aid

Base64 Code	Mnemonic Aid	Decoded*	Description
JAB	🗣 Jabber	$.	Variable declaration (UTF-16), e.g. JABlAG4AdgA for $env:
TVq	📺 Television	MZ	MZ header
SUVY	🚙 SUV	IEX	PowerShell Invoke Expression
SQBFAF	🐣 Squab favorite	I.E.	PowerShell Invoke Expression (UTF-16)
SQBuAH	🐣 Squab uahhh	I.n.	PowerShell Invoke string (UTF-16) e.g. Invoke-Mimikatz
PAA	💪 "Pah!"	<.	Often used by Emotet (UTF-16)

maxidorius

This configuration is provided AS-IS and as an example/reference for those who do not find a working configuration for themselves. It is not always kept up to date and no support is provided.

Assuming:

• Your Matrix domain: example.org
• Your TURN domain (arbitrary): turn.example.org
• Your Public IP: 1.2.3.4
• Your Private IP for the box hosing the services: 10.11.12.13
• A shared secret between synapse and coturn: ThisIsASharedSecret-ChangeMe
• You want Firefox compatiblity (TURNS only is not supported)

scotgabriel

Rundll32 commands

OS: Windows 10/8/7

Add/Remove Programs

• RunDll32.exe shell32.dll,Control_RunDLL appwiz.cpl,,0

Content Advisor

• RunDll32.exe msrating.dll,RatingSetupUI

Control Panel

samuelcolvin

from datetime import datetime
from time import sleep

from dnslib import DNSLabel, QTYPE, RD, RR
from dnslib import A, AAAA, CNAME, MX, NS, SOA, TXT
from dnslib.server import DNSServer

EPOCH = datetime(1970, 1, 1)
SERIAL = int((datetime.utcnow() - EPOCH).total_seconds())

iglocska

#!/usr/bin/env python
# -*- coding: utf-8 -*-
import csv
import string
from pymisp import PyMISP
from keys import misp_url, misp_key
import argparse

# For python2 & 3 compat, a bit dirty, but it seems to be the least bad one
try:

williballenthin

'''
IDAPython script that generates a YARA rule to match against the
basic blocks of the current function. It masks out relocation bytes
and ignores jump instructions (given that we're already trying to
match compiler-specific bytes, this is of arguable benefit).

If python-yara is installed, the IDAPython script also validates that
the generated rule matches at least one segment in the current file.

author: Willi Ballenthin <william.ballenthin@fireeye.com>

2xyo

{
  "namespace": "Information-security-indicators",
  "description": "A full set of operational indicators for organizations to use to benchmark their security posture",
  "version": "1.1.2",
  "predicates": [
    {
      "value": "IEX",
      "expanded": "Intrusions and external attacks",
      "description": "Indicators of this category give information on the occurrence of incidents caused by external malicious threat sources."
    },

belgian-photographer.md

• Manuel Lauti - http://lauti.photo.over-blog.com/
• Brigitte Grignet - http://www.brigittegrignet.com/
• Hubert Grooteclaes (1927-1994) - http://www.hubertgrooteclaes.com/fr
• Cedric Gerbehaye (1977) - https://www.agencevu.com/photographers/photographer.php?id=214
• Alain Janssens (1956) - http://www.alainjanssens.be
• Matthieu Marre - http://www.matthieumarre.com/
• Nicolas Springael (1965) - http://www.nicolasspringael.be/
• Stephan Vanfleteren - http://stephanvanfleteren.com

achillean