edermi

import sys

def main():
    with open(sys.argv[1], 'rb') as f:
        shellcode = f.read()
    hexlified = ['0x{:02X}'.format(b) for b in shellcode]
    with open(sys.argv[2], 'w') as f:
        f.write(','.join(hexlified))
    sys.stderr.write("Shellcode length: {}".format(len(shellcode)))

edermi

# Ensure System.Security assembly is loaded.
Add-Type -AssemblyName System.Security

function ConvertTo-CIPolicy {
<#
.SYNOPSIS

Converts a binary file that contains a Code Integrity policy into XML format.

Author: Matthew Graeber (@mattifestation)

edermi

import requests
import json
import time
import argparse
import getpass
import os
import sys


def main():

edermi

with open("collected_hashes_ntlmv2.txt", 'r') as hashfile:
    hashes=hashfile.read().splitlines()

hash_dict = {}

for line in hashes:
    name, _ = line.split("::")
    hash_dict[name] = line

with open("uniq_collected_hashes_ntlmv2.txt", 'w') as hashfile:

edermi

#Thank you @NotMedic for troubleshooting/validating stuff!

$password = Read-Host -Prompt "Enter Password"
#^^ Feel free to hardcode this for running in a beacon/not retyping it all the time!

$server = "admin" #This will just decide the name of the cert request files that are created. I didn't want to change the var name so it's server for now. 
$CERTPATH = "C:\Users\lowpriv\Desktop\" #Where do you want the cert requests to be stored?
$CAFQDN = "dc01.alexlab.local" #hostname of underlying CA box.
$CASERVER = "alexlab-dc01-ca" #CA name.
$CA = $CAFQDN + "\" + $CASERVER