Skip to content

Instantly share code, notes, and snippets.

View dennyhalim's full-sized avatar

DennyHalim.com dennyhalim

View GitHub Profile

Randomized MAC addresses

Most modern client devices may now support, random hardware address aka randomized mac addresses.

From an I.T op perspective, this may cause DHCP pool exhaustion issues.

From a user perspective, they may not know what issues this may cause, besides a "I can't connect to the network anymore" issue.

This maybe of interest too, https://github.com/SystemJargon/mac-changer

@dennyhalim
dennyhalim / List of ransomware extensions
Created February 19, 2025 07:56 — forked from sfponce/List of ransomware extensions
List of ransomware extensions
File extensions appended to files:
.ecc, .ezz, .exx, .zzz, .xyz, .aaa, *.cryp1, .abc, .ccc, .vvv, *.zepto, .xxx, .ttt, .micro, .encrypted, .locked, .crypto, _crypt, .crinf, .r5a, .XRNT, .XTBL, .crypt, .R16M01D05, .pzdc, .good, .LOL!, .OMG!, .RDM, .RRK, .encryptedRSA, .crjoker, .EnCiPhErEd, .LeChiffre, .keybtc@inbox_com, .0x0, .bleep, .1999, .vault, .HA3, .toxcrypt, .magic, .SUPERCRYPT, .CTBL, .CTB2, .diablo6, .Lukitus, .locky or 6-7 length extension consisting of random characters.
Known ransom note files:
HELPDECRYPT.TXT, HELP_YOUR_FILES.TXT, HELP_TO_DECRYPT_YOUR_FILES.txt, RECOVERY_KEY.txt HELP_RESTORE_FILES.txt, HELP_RECOVER_FILES.txt, HELP_TO_SAVE_FILES.txt, DecryptAllFiles.txt DECRYPT_INSTRUCTIONS.TXT, INSTRUCCIONES_DESCIFRADO.TXT, How_To_Recover_Files.txt YOUR_FILES.HTML, YOUR_FILES.url, encryptor_raas_readme_liesmich.txt, Help_Decrypt.txt DECRYPT_INSTRUCTION.TXT, HOW_TO_DECRYPT_FILES.TXT, ReadDecryptFilesHere.txt, Coin.Locker.txt _secret_code.txt, About_Files.txt, Read.txt, ReadMe.txt, DECRYPT_ReadM
#https://admx.help/?Category=ChromeEnterprise&Policy=Google.Policies.Chrome::DnsOverHttpsMode
reg.exe add "HKLM\Software\Wow6432Node\Google\Chrome\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm" /v update_url /t REG_SZ /D "https://clients2.google.com/service/update2/crx" /F
reg.exe add "HKLM\Software\Google\Chrome\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm" /v update_url /t REG_SZ /D "https://clients2.google.com/service/update2/crx" /F
reg.exe add "HKLM\Software\Policies\Google\Chrome" /v DnsOverHttpsMode /f /t REG_SZ /d automatic
reg.exe add "HKLM\Software\Policies\Google\Chrome" /v DnsOverHttpsTemplates /f /t REG_SZ /d "https://dns-family.adguard.com/dns-query"
reg.exe add "HKLM\Software\Policies\Google\Chrome" /v BackgroundModeEnabled /f /t REG_DWORD /d 0
reg.exe add "HKLM\Software\Policies\Google\Chrome\Recommended" /v DefaultCookiesSetting /f /t REG_DWORD /d 4
reg.exe add "HKLM\Software\Policies\Google\Chrome\Recommended" /v DefaultNotificationsSetting /f /t REG_DWORD /d 2
reg.exe add "HKLM\Software\Pol
@dennyhalim
dennyhalim / install-kabuto.ps1
Last active June 27, 2017 06:51 — forked from kurokikaze/gist:350fe1713591641b3b42
test install from powershell
(new-object System.Net.WebClient).DownloadFile('https://app.kabuto.io/dl/cp/13105', '$env:windir\temp\kabuto.exe');. $env:windir\temp\kabuto.exe
@dennyhalim
dennyhalim / update.box
Last active June 14, 2017 14:19
updatewindows.boxstarter
#windows updater using boxstarter.org
#Enable-UAC
#Enable-RemoteDesktop
#Disable-MicrosoftUpdate
Set-ExplorerOptions -showHiddenFilesFoldersDrives -showFileExtensions #-showProtectedOSFiles
cinst TelnetClient -source windowsFeatures
#cinst Microsoft-Windows-Subsystem-Linux -source windowsFeatures
#choco uninstall -ry SMB1Protocol -source windowsFeatures
#choco uninstall -ry Internet-Explorer-Optional-x86 -source windowsFeatures
@dennyhalim
dennyhalim / group-policies.reg
Last active October 15, 2016 17:40
group-policies.reg
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\W32time\Parameters]
"NtpServer"="id.pool.ntp.org,0x02"
"Type"="AllSync"
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Main]
"Enable Browser Extensions"="no"
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome]
<?php
//
// code licensed http://creativecommons.org/licenses/by-nc/3.0/
// plus, one rule. a link to http://dennyhalim.com from wherever this code used
//
// first of all, add this line (without //) to .htaccess:
// ErrorDocument 404 /404.php
//
// you dont need to edit anything here
// unless you want to change the looks & feel to match your website you can edit the html at the bottom
@dennyhalim
dennyhalim / .htaccess
Last active October 4, 2015 03:08
htaccess tricks
#little bit more secure?
#post/comment/login with bad referer
RewriteEngine On
RewriteCond %{REQUEST_METHOD} POST
RewriteCond %{REQUEST_URI} .admin* [OR]
RewriteCond %{REQUEST_URI} .login\.php* [OR]
RewriteCond %{REQUEST_URI} .wp-comments-post\.php*
RewriteCond %{HTTP_HOST}@@%{HTTP_REFERER} !^([^@]*)@@https?://\1/.* [OR]
RewriteCond %{HTTP_USER_AGENT} ^$
//+------------------------------------------------------------------+
//| 1_Min_Micro_Trading.mq4 |
//| StarLimit Software Corps., |
//| [email protected] |
//+------------------------------------------------------------------+
#property copyright "StarLimit Software Corps.,"
#property link "[email protected]"
#property indicator_chart_window
#!/bin/sh
# info https://gist.github.com/888017
# boleh masuk ke /etc/cron.daily/
mkdir /root/tmp
cd /root/tmp
rm -rf /root/tmp/emerging-IPTABLES-ALL.rules
export IPTABLES=/sbin/iptables
wget http://rules.emergingthreats.net/fwrules/emerging-IPTABLES-ALL.rules;type=a