THIS GIST WAS MOVED TO TERMSTANDARD/COLORS REPOSITORY.
PLEASE ASK YOUR QUESTIONS OR ADD ANY SUGGESTIONS AS A REPOSITORY ISSUES OR PULL REQUESTS INSTEAD!
| # IMPORTANT! | |
| # This gist has been transformed into a github repo | |
| # You can find the most recent version there: | |
| # https://github.com/Neo23x0/auditd | |
| # ___ ___ __ __ | |
| # / | __ ______/ (_) /_____/ / | |
| # / /| |/ / / / __ / / __/ __ / | |
| # / ___ / /_/ / /_/ / / /_/ /_/ / | |
| # /_/ |_\__,_/\__,_/_/\__/\__,_/ |
| function Get-ClrReflection | |
| { | |
| <# | |
| .SYNOPSIS | |
| Detects memory-only CLR (.NET) modules | |
| Author: Joe Desimone (@dez_) | |
| License: BSD 3-Clause | |
| $EventFilterArgs = @{ | |
| EventNamespace = 'root/cimv2' | |
| Name = 'PowerShellProcessStarted' | |
| Query = 'SELECT FileName, ProcessID FROM Win32_ModuleLoadTrace WHERE FileName LIKE "%System.Management.Automation%.dll"' | |
| QueryLanguage = 'WQL' | |
| } | |
| $Filter = New-CimInstance -Namespace root/subscription -ClassName __EventFilter -Property $EventFilterArgs | |
| $CommandLineConsumerArgs = @{ |
| # coding: utf-8 | |
| from Foundation import * | |
| from QuartzCore import * | |
| from UIKit import * | |
| import console | |
| WKWebView = ObjCClass('WKWebView') | |
| @on_main_thread |
| # coding: utf-8 | |
| from objc_util import * | |
| NSAKDeserializer = ObjCClass('NSAKDeserializer') | |
| NSAKDeserializerStream = ObjCClass('NSAKDeserializerStream') | |
| NSAKSerializer = ObjCClass('NSAKSerializer') | |
| NSAKSerializerStream = ObjCClass('NSAKSerializerStream') | |
| NSAbstractLayoutGuide = ObjCClass('NSAbstractLayoutGuide') | |
| NSAddressCheckingResult = ObjCClass('NSAddressCheckingResult') | |
| NSAffineTransform = ObjCClass('NSAffineTransform') |
| # build wine Docker image | |
| pushd wine; docker build -t wine .; popd | |
| # build x11 Docker image for IDA | |
| pushd ida; docker build -t wine/ida .; popd | |
| # demonstrate x11 forwarding works | |
| docker run -ti --rm -e DISPLAY=$DISPLAY -v /tmp/.X11-unix:/tmp/.X11-unix wine/ida xclock | |
| # interactive shell in container |
THIS GIST WAS MOVED TO TERMSTANDARD/COLORS REPOSITORY.
PLEASE ASK YOUR QUESTIONS OR ADD ANY SUGGESTIONS AS A REPOSITORY ISSUES OR PULL REQUESTS INSTEAD!
Each of these commands will run an ad hoc http static server in your current (or specified) directory, available at http://localhost:8000. Use this power wisely.
$ python -m SimpleHTTPServer 8000| import requests, os, glob, json, sys, webbrowser | |
| you = 'self' | |
| data = 'checkins' | |
| try: os.mkdir(data) | |
| except Exception: pass | |
| cid = 'YOUR_CLIENT_ID' |