filipesam

Aruba produces two different software loads for their Access Point hardware. The first is called ArubaOS and the second is called Aruba Instant. With ArubaOS, the AP requires a Mobility Controller (hardware) to be installed in the network. With the Aruba Instant it is possible to run AP’s independently (standalone mode) or in a cluster, with no Mobility Controller in the network.

Signing

simple bind over insecure channel

# ldapsearch -xLLL -H ldap://ad1.win2016.test -b 'DC=win2016,DC=test' -D 'CN=Administrator,CN=Users,DC=win2016,DC=test' -W samaccountname=Administrator DN 
Enter LDAP Password: 
ldap_bind: Strong(er) authentication required (8)
        additional info: 00002028: LdapErr: DSID-0C090256, comment: The server requires binds to turn on integrity checking if SSL\TLS are not already active on the connection, data 0, v3839

Red Teaming tool

General usefull Powershell Scripts
AMSI Bypass restriction Bypass
Payload Hosting
Network Share Scanner
Lateral Movement
Reverse Shellz
POST Exploitation

Enter this in the search box along with your search terms:

Get all gists from the user santisbon.
user:santisbon

Find all gists with a .yml extension.
extension:yml

Find all gists with HTML files.
language:html

	#!/usr/bin/python
	"""
	Simple tool to extract local users and passwords from most Huawei routers/firewalls config files.
	Will extract plain-text passwords and crypted credentials. Huawei config files use DES encryption with
	a known key. Using this information, the script will decrypt credentials found in the config file.
	Author: Etienne Stalmans ([email protected])
	Version: 1.0 (12/01/2014)
	"""

	from Crypto.Cipher import DES

	##TCP FLAGS##

	Unskilled Attackers Pester Real Security Folks
	==============================================
	TCPDUMP FLAGS
	Unskilled = URG = (Not Displayed in Flag Field, Displayed elsewhere)
	Attackers = ACK = (Not Displayed in Flag Field, Displayed elsewhere)
	Pester = PSH = [P] (Push Data)
	Real = RST = [R] (Reset Connection)
	Security = SYN = [S] (Start Connection)

	#!/usr/bin/env python3

	'''
	NameMash by superkojiman

	Generate a list of possible usernames from a person's first and last name.

	https://blog.techorganic.com/2011/07/17/creating-a-user-name-list-for-brute-force-attacks/
	'''

	#!/usr/bin/python
	from scapy.all import *
	import time, sys
	pkts = rdpcap(sys.argv[1])
	clk = pkts[0].time
	for p in pkts:
	time.sleep(p.time - clk)
	clk = p.time
	sendp(p)

	from __future__ import print_function
	import pickle
	import os.path
	from googleapiclient.discovery import build
	from google_auth_oauthlib.flow import InstalledAppFlow
	from google.auth.transport.requests import Request
	from apiclient import errors
	import re
	from bs4 import BeautifulSoup as Soup

	// dllmain.cpp : Defines the entry point for the DLL application.
	#include "pch.h"
	#include <Windows.h>

	extern "C" __declspec(dllexport) LONG CplApplet()
	{
	MessageBoxA(NULL, "Replace this message box with something more interesting...", "Control Panel", 0);
	return 1;
	}