Skip to content

Instantly share code, notes, and snippets.

View mirchr's full-sized avatar

Rich Mirch mirchr

View GitHub Profile
@mirchr
mirchr / dll-hijack.c
Created February 7, 2021 17:50
Simple DLL Hijack Stub
/* Cross Compile with
i686-w64-mingw32-g++ calc.c -o calc32.dll -shared
*/
#include <windows.h>
BOOL WINAPI DllMain(
HINSTANCE hinstDLL,
DWORD fdwReason,
LPVOID lpReserved )
{
switch( fdwReason )
@mirchr
mirchr / CSM_pocs.md
Created November 17, 2020 14:22 — forked from Frycos/CSM_pocs.md

TLDR

Cisco Security Manager is an enterprise-class security management application that provides insight into and control of Cisco security and network devices. Cisco Security Manager offers comprehensive security management (configuration and event management) across a wide range of Cisco security appliances, including Cisco ASA Adaptive Security Appliances, Cisco IPS Series Sensor Appliances, Cisco Integrated Services Routers (ISRs), Cisco Firewall Services Modules (FWSMs), Cisco Catalyst, Cisco Switches and many more. Cisco Security Manager allows you to manage networks of all sizes efficiently-from small networks to large networks consisting of hundreds of devices.

Several pre-auth vulnerabilities were submitted to Cisco on 2020-07-13 and (according to Cisco) patched in version 4.22 on 2020-11-10. Release notes didn't state anything about the vulnerabilities, security advisories were not published. All payload are processed in the context of NT AUTHORITY\SYSTEM.

@mirchr
mirchr / kb.txt
Created October 22, 2018 22:16
kb
### Keybase proof
I hereby claim:
* I am mirchr on github.
* I am 0xm1rch (https://keybase.io/0xm1rch) on keybase.
* I have a public key ASCuNpLyvmejL1TXQNyrFDueNeVEyntVGxDMLAcxO1XEIwo
To claim this, I am signing this object:
@mirchr
mirchr / opcodes.sh
Created July 23, 2017 02:31 — forked from offlinemark/opcodes.sh
bash one-liner for converting binary object file to shellcode ( i didn't write this)
for i in $(objdump -d shell.o -M intel |grep "^ " |cut -f2); do echo -n '\x'$i; done;echo