schrodyn / equation_drug_hashes.txt

Created January 14, 2017 15:47 — forked from msuiche/equation_drug_hashes.txt

file list equationdrug

	61110bea272972903985d5d5e452802c DSZOPSDISK/Resources/Df/Uploads/i386-winnt/DoubleFeatureDll.dll.unfinalized
	0d81f9972863c6d8c90100a73b0600ab DSZOPSDISK/Resources/DmGz/Uploads/i386/winnt/ntfltmgr.sys
	e14ab6e6ae835792979ff50e647b89c8 DSZOPSDISK/Resources/DSky/Uploads/i386/winnt/tdi6.sys
	997ba8c988340a1c644cf9a5f67e4177 DSZOPSDISK/Resources/Ep/Plugins/Files/DuplicateToken_Implant.dll
	425fb612ba62fc1ecad9fb24d10f9bfa DSZOPSDISK/Resources/Ep/Plugins/Files/EventLogEdit_Implant.dll
	c11142caa3013f852ccb698cc6008b51 DSZOPSDISK/Resources/Ep/Plugins/Files/GetAdmin_Implant.dll
	bdd2b462e050ef2fa7778526ea4a2a58 DSZOPSDISK/Resources/Ep/Plugins/Files/kill_Implant.dll
	199796e3f413074d5fdef7fe8334eccf DSZOPSDISK/Resources/Ep/Plugins/Files/LSADUMP_Implant.dll
	cf5b0d82d39669f584258389f4307b82 DSZOPSDISK/Resources/Ep/Plugins/Files/modifyAudit_Implant.dll
	8187650eb74ccb3f0fb647335fd54d30 DSZOPSDISK/Resources/Ep/Plugins/Files/modifyAuthentication_Implant.dll

schrodyn / file.rsp

Created January 17, 2017 16:43 — forked from NickTyrer/file.rsp

REGSVR odbcconf.dll

schrodyn / DynamicWrapperCS.cs

Created February 13, 2017 08:16

Dynamic Wrapper 1.1

	using System;
	using System.Reflection;
	using System.Reflection.Emit;
	using System.Runtime;
	using System.Text;
	using System.Runtime.InteropServices;
	using System.EnterpriseServices;
	using ComTypes = System.Runtime.InteropServices.ComTypes;

schrodyn / kernel.xml

Created February 13, 2017 08:58

Blog Post Code - Attacking Drivers with MSBuild.exe.

	<Project ToolsVersion="4.0" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
	<!-- This inline task executes c# code. -->
	<!-- C:\Windows\Microsoft.NET\Framework\v4.0.30319\msbuild.exe kernel.xml -->
	<Target Name="Hello">

	<ClassExample />

	</Target>
	<UsingTask
	TaskName="ClassExample"

schrodyn / beaconator.stp

Created February 13, 2017 09:35 — forked from jbradley89/beaconator.stp

A system tap script to detect UDP beacons

schrodyn / resources.md

Created April 19, 2017 13:42 — forked from iam1980/resources.md

Shadow Brokers EQGRP Lost in Translation resources

Shadow Brokers EQGRP Lost in Translation resources - work in progress

scrapped from @x0rz,@etlow,@Dinosn,@hackerfantastic,@highmeh,@cyb3rops and others

schrodyn / decompiler

Created April 26, 2017 13:27 — forked from anonymous/decompiler

Androguard decompilation script for APKs

	#!/usr/bin/python
	"""
	Androguard decompilation script.
	Feed it an APK and an output directory and it will dump the source for you.

	I used this script to learn some androguard skillz.
	by k3170makan
	"""
	from sys import argv
	from sys import exit

schrodyn / peddlecheap-output

Created May 10, 2017 14:29 — forked from misterch0c/peddlecheap-output

schrodyn / strings.py

Created July 12, 2017 23:26 — forked from williballenthin/strings.py

Extract ASCII and Unicode strings using Python.

	import re
	from collections import namedtuple


	ASCII_BYTE = " !\"#\$%&\'\*\+,-\./0123456789:;<=>\?@ABCDEFGHIJKLMNOPQRSTUVWXYZ\[\]\^_`abcdefghijklmnopqrstuvwxyz\{\\|\}\\\~\t"


	String = namedtuple("String", ["s", "offset"])

schrodyn / all.txt

Created July 15, 2017 17:42 — forked from jhaddix/all.txt

dnsall

This file has been truncated, but you can view the full file.

	import re
	from collections import namedtuple


	ASCII_BYTE = " !\"#\$%&\'\(\)\*\+,-\./0123456789:;<=>\?@ABCDEFGHIJKLMNOPQRSTUVWXYZ\[\]\^_`abcdefghijklmnopqrstuvwxyz\{\\|\}\\\~\t"


	String = namedtuple("String", ["s", "offset"])

Schrodinger schrodyn