THIS GIST WAS MOVED TO TERMSTANDARD/COLORS
REPOSITORY.
PLEASE ASK YOUR QUESTIONS OR ADD ANY SUGGESTIONS AS A REPOSITORY ISSUES OR PULL REQUESTS INSTEAD!
# IMPORTANT! | |
# This gist has been transformed into a github repo | |
# You can find the most recent version there: | |
# https://github.com/Neo23x0/auditd | |
# ___ ___ __ __ | |
# / | __ ______/ (_) /_____/ / | |
# / /| |/ / / / __ / / __/ __ / | |
# / ___ / /_/ / /_/ / / /_/ /_/ / | |
# /_/ |_\__,_/\__,_/_/\__/\__,_/ |
function Get-ClrReflection | |
{ | |
<# | |
.SYNOPSIS | |
Detects memory-only CLR (.NET) modules | |
Author: Joe Desimone (@dez_) | |
License: BSD 3-Clause | |
$EventFilterArgs = @{ | |
EventNamespace = 'root/cimv2' | |
Name = 'PowerShellProcessStarted' | |
Query = 'SELECT FileName, ProcessID FROM Win32_ModuleLoadTrace WHERE FileName LIKE "%System.Management.Automation%.dll"' | |
QueryLanguage = 'WQL' | |
} | |
$Filter = New-CimInstance -Namespace root/subscription -ClassName __EventFilter -Property $EventFilterArgs | |
$CommandLineConsumerArgs = @{ |
# coding: utf-8 | |
from Foundation import * | |
from QuartzCore import * | |
from UIKit import * | |
import console | |
WKWebView = ObjCClass('WKWebView') | |
@on_main_thread |
# coding: utf-8 | |
from objc_util import * | |
NSAKDeserializer = ObjCClass('NSAKDeserializer') | |
NSAKDeserializerStream = ObjCClass('NSAKDeserializerStream') | |
NSAKSerializer = ObjCClass('NSAKSerializer') | |
NSAKSerializerStream = ObjCClass('NSAKSerializerStream') | |
NSAbstractLayoutGuide = ObjCClass('NSAbstractLayoutGuide') | |
NSAddressCheckingResult = ObjCClass('NSAddressCheckingResult') | |
NSAffineTransform = ObjCClass('NSAffineTransform') |
# build wine Docker image | |
pushd wine; docker build -t wine .; popd | |
# build x11 Docker image for IDA | |
pushd ida; docker build -t wine/ida .; popd | |
# demonstrate x11 forwarding works | |
docker run -ti --rm -e DISPLAY=$DISPLAY -v /tmp/.X11-unix:/tmp/.X11-unix wine/ida xclock | |
# interactive shell in container |
THIS GIST WAS MOVED TO TERMSTANDARD/COLORS
REPOSITORY.
PLEASE ASK YOUR QUESTIONS OR ADD ANY SUGGESTIONS AS A REPOSITORY ISSUES OR PULL REQUESTS INSTEAD!
Each of these commands will run an ad hoc http static server in your current (or specified) directory, available at http://localhost:8000. Use this power wisely.
$ python -m SimpleHTTPServer 8000
import requests, os, glob, json, sys, webbrowser | |
you = 'self' | |
data = 'checkins' | |
try: os.mkdir(data) | |
except Exception: pass | |
cid = 'YOUR_CLIENT_ID' |