Skip to content

Instantly share code, notes, and snippets.

View h4rithd's full-sized avatar
☠️
<script>alert('security is just an illusion');</script>

Harith Dilshan h4rithd

☠️
<script>alert('security is just an illusion');</script>
View GitHub Profile
@h4rithd
h4rithd / CrazyUser.c
Created May 14, 2024 15:02
This script creates a new user on a Windows system, adds the user to the Administrators group, grants PsExec and Evil-WinRM access, disables all firewall rules, enables SMB to allow login via PsExec and Evil-WinRM, grants access to administrative shares, and sets LocalAccountTokenFilterPolicy to allow remote administrative connections with full …
/*
**************************************************************************
* *
* Created by Harith Dilshan (h4rithd.com) *
* *
* Purpose: *
* This script creates a new user on a Windows system, adds the user *
* to the Administrators group, grants PsExec and Evil-WinRM access, *
* disables all firewall rules, enables SMB to allow login via *
* PsExec and Evil-WinRM, grants access to administrative shares, and *
@h4rithd
h4rithd / gitea2hashcat.py
Last active April 14, 2025 22:25
Crack the Gitea password using hashcat. The script was taken from an IppSec's video. [https://youtu.be/aG_N2ZiCfxk?t=2419]
import sqlite3
import base64
import sys
if len(sys.argv) != 2:
print("Usage: python3 gitea3hashcat.py <gitea.db>")
sys.exit(1)
try:
con = sqlite3.connect(sys.argv[1])