Patrick Young kmahyyg

tmux cheatsheet

As configured in my dotfiles.

start new:

tmux

start new with session name:

systemd-nspawn container architecture

This short document will show how to turn systemd-nspawn into a usable containeration system.

Those instructions here should work under Arch Linux and Debian 10 (Buster)

Host requirements

systemd-nspawn and machinectl (systemd-container package under Debian)
dnsmasq
debootstrap

Kerberos cheatsheet

Bruteforcing

With kerbrute.py:

python kerbrute.py -domain <domain_name> -users <users_file> -passwords <passwords_file> -outputfile <output_file>

With Rubeus version with brute module:

Guide to Use Nextron's Sigma EVTX Checker

It's a fast go-based scanner for Linux, Windows, and macOS that applies Sigma rules and outputs the matches as JSON.

Clone the Sigma Repository and `cd` into it

git clone https://github.com/SigmaHQ/sigma.git
cd sigma

FAQ on the xz-utils backdoor (CVE-2024-3094)

This is a living document. Everything in this document is made in good faith of being accurate, but like I just said; we don't yet know everything about what's going on.

Update: I've disabled comments as of 2025-01-26 to avoid everyone having notifications for something a year on if someone wants to suggest a correction. Folks are free to email to suggest corrections still, of course.

	import argparse
	from multiprocessing import Process
	import logging
	logging.getLogger("scapy.runtime").setLevel(logging.ERROR)
	from scapy.all import *
	import signal
	import threading
	from sys import platform

	<?xml version="1.0" encoding="UTF-8"?>
	<!DOCTYPE fontconfig SYSTEM "fonts.dtd">
	<!--
	Noto Mono + Color Emoji Font Configuration.

	Currently the only Terminal Emulator I'm aware that supports colour fonts is Konsole.

	Usage:
	0. Ensure that the Noto fonts are installed on your machine.
	1. Install this file to ~/.config/fontconfig/conf.d/99-noto-mono-color-emoji.conf

	import time
	from selenium import webdriver

	driver = webdriver.Chrome('./chromedriver')
	driver.get('https://ui.lkqd.com/login')
	assert 'LKQD' in driver.title

	time.sleep(2)
	username_field = driver.find_element_by_name('username')
	username_field.send_keys('myusername')

	Private Sub Worksheet_SelectionChange(ByVal target As Range)
	Application.ScreenUpdating = True
	On Error Resume Next
	If InStr(ActiveCell, "fq") Then
	With ActiveCell.Interior
	.Color = vbRed
	End With
	With ActiveCell.Font
	.Color = vbWhite
	.Bold = True

	# This script will manually rip out all VMware Tools registry entries and files for Windows 2008-2019
	# Tested for 2019, 2016, and probably works on 2012 R2 after the 2016 fixes.

	# This function pulls out the common ID used for most of the VMware registry entries along with the ID
	# associated with the MSI for VMware Tools.
	function Get-VMwareToolsInstallerID {
	foreach ($item in $(Get-ChildItem Registry::HKEY_CLASSES_ROOT\Installer\Products)) {
	If ($item.GetValue('ProductName') -eq 'VMware Tools') {
	return @{
	reg_id = $item.PSChildName;