This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| $NumberOfLogicalProcessors = Get-CimInstance win32_processor | Select-Object -ExpandProperty NumberOfLogicalProcessors | |
| ForEach ($core in 1..$NumberOfLogicalProcessors) { | |
| start-job -ScriptBlock { | |
| $result = 1; | |
| foreach ($loopnumber in 1..2147483647) { | |
| $result = 1; | |
| foreach ($loopnumber1 in 1..2147483647) { | |
| $result = 1; |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| function Reset-Errors { | |
| $Global:Error.Clear() | |
| $psISE.Options.ErrorForegroundColor = '#FFFF0000' | |
| $Global:ErrorView = 'NormalView' | |
| } | |
| Reset-Errors | |
| #generate an error | |
| function Show-Error { | |
| Get-Item c:\doesnotexist.txt |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| import json | |
| import base64 | |
| import os | |
| # make sure the output directory exists before running! | |
| folder = os.path.join(os.getcwd(), "imgs") | |
| with open("src.har", "r") as f: | |
| har = json.loads(f.read()) |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <# | |
| .SYNOPSIS | |
| WDigest credential caching [Memory] | |
| Author: @r00t-3xp10it | |
| Credits: @wh0nsq [BypassCredGuard.exe] | |
| Credits: @BenjaminDelpy [mi`mi`katz.exe] | |
| Tested Under: Windows 10 (19044) x64 bits | |
| Required Dependencies: Administrator privileges | |
| Optional Dependencies: WDigest, BypassCredGuard.exe |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <# | |
| .SYNOPSIS | |
| Manage Windows Password Vault Items | |
| Author: @r00t-3xp10it | |
| Tested Under: Windows 10 (19044) x64 bits | |
| Required Dependencies: VaultSvc, VaultCmd | |
| Optional Dependencies: none | |
| PS cmdlet Dev version: v1.3.8 | |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <# | |
| .SYNOPSIS | |
| Search for Strings\Regex inside files | |
| Author: @r00t-3xp10it (ssa redteam) | |
| Tested Under: Windows 10 (19044) x64 bits | |
| Required Dependencies: none | |
| Optional Dependencies: VaultSvc, VaultCmd | |
| PS cmdlet Dev version: v1.1.21 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <# | |
| .SYNOPSIS | |
| Retrieves the Computer's geographical location | |
| Author: @r00t-3xp10it | |
| Addapted from: @colsw {stackoverflow} | |
| Tested Under: Windows 10 (19044) x64 bits | |
| Required Dependencies: Device.Location.GeoCoordinateWatcher | |
| Optional Dependencies: Curl\ipapi.co {native} | |
| PS cmdlet Dev version: v1.0.3 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <# | |
| .SYNOPSIS | |
| Sign a Windows binary with a self-signed certificate | |
| Author: @r00t-3xp10it (ssa redteam) | |
| Tested Under: Windows 10 (19043) x64 bits | |
| Required Dependencies: Administrator privileges | |
| Optional Dependencies: New-SelfSignedCertificate | |
| PS cmdlet Dev version: v1.0.6 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <# | |
| .SYNOPSIS | |
| Convert ETL logfiles into readable data | |
| Author: @r00t-3xp10it (ssa redteam) | |
| Tested Under: Windows 10 (19043) x64 bits | |
| Required Dependencies: Get-WindowsUpdateLog {native} | |
| Optional Dependencies: none | |
| PS cmdlet Dev version: v1.1.8 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <# | |
| .SYNOPSIS | |
| List DLLs loaded by running processes! | |
| Author: @r00t-3xp10it | |
| Tested Under: Windows 10 (19043) x64 bits | |
| Required Dependencies: Get-Process {native} | |
| Optional Dependencies: none | |
| PS cmdlet Dev version: v1.0.3 |