The following content is generated using a preview release of Swimlane's pyattck.
This snippet of data is scoped to the following actor groups:
- APT33
- APT34
- APT39
- Charming Kitten
| # Warning | |
| Clear-Host | |
| Write-Output "Run this script on the computer you want to access via RDP" | |
| Write-Output "" | |
| # Ask | |
| Write-Output "Remote address can be an IP address or network with CIDR" | |
| Write-Output "Example: 192.168.0.5 or 192.168.0.0/24" | |
| Write-Output "" | |
| $RemoteAddress = Read-Host "Remote Address" |
| from pydomo import Domo | |
| import logging | |
| import json | |
| import requests | |
| """ Connect to Domo using the Pydomo library and the client id and secret | |
| Documentation: | |
| https://developer.domo.com/docs/authentication/quickstart-5 | |
| Args: | |
| client_id (str): client_id to connect with |
| #!/usr/bin/env bash | |
| set -Eeuo pipefail | |
| trap cleanup SIGINT SIGTERM ERR EXIT | |
| script_dir=$(cd "$(dirname "${BASH_SOURCE[0]}")" &>/dev/null && pwd -P) | |
| usage() { | |
| cat <<EOF | |
| Usage: $(basename "${BASH_SOURCE[0]}") [-h] [-v] [-f] -p param_value arg1 [arg2...] |
| <!--javascript --> | |
| ja	vascript:alert(1) | |
| ja
vascript:alert(1) | |
| ja
vascript:alert(1) | |
| javascript:alert() | |
| <!--::colon:: --> | |
| javascript:alert() | |
| javascript:alert() | |
| javascript:alert(1) |
| function sslsub() { | |
| timeout 3 openssl s_client -showcerts -servername $1 -connect $1:443 <<< "Q" 2>/dev/null | openssl x509 -text -noout | grep DNS | tr ',' '\n' | cut -d ':' -f 2 | sort -fu | |
| } |
| // Mozilla User Preferences | |
| // To change a preference value, you can either: | |
| // - modify it via the UI (e.g. via about:config in the browser); or | |
| // - set it within a user.js file in your profile (create it if it doesn't exist). | |
| // | |
| // Profile folder location on different systems: | |
| // Windows: C:\Users\<username>\AppData\Roaming\Mozilla\Firefox\Profiles\xxxxxxxx.default | |
| // Mac OS X: Users/<username>/Library/Application Support/Firefox/Profiles/xxxxxxxx.default | |
| // Linux: /home/<username>/.mozilla/firefox/xxxxxxxx.default |
| #Copyright 2021 Fabian Bosler | |
| # Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation | |
| # files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, | |
| # modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom | |
| # the Software is furnished to do so, subject to the following conditions: | |
| # The above copyright notice and this permission notice shall be included in all copies or substantial portions of the | |
| # Software. |
| using namespace System.Net.Sockets | |
| using namespace System.Net.Security | |
| using namespace System.Security.Cryptography.X509Certificates | |
| function ConvertFrom-X509Certificate { | |
| param( | |
| [Parameter(ValueFromPipeline)] | |
| [X509Certificate2]$Certificate | |
| ) |
| # %UserProfile%\Documents\PowerShell\Microsoft.PowerShell_profile.ps1 | |
| Add-Type -AssemblyName WindowsBase | |
| Add-Type -AssemblyName PresentationCore | |
| if (-not [Windows.Input.Keyboard]::IsKeyDown([System.Windows.Input.Key]::LeftCtrl)) | |
| { | |
| Import-Module posh-git | |
| Import-Module Pscx | |
| } |
The following content is generated using a preview release of Swimlane's pyattck.
This snippet of data is scoped to the following actor groups: