Konstantin Mokhnatkin sub314xxl

This is a note for myself describing various Visual Basic macros construction strategies that could be used for remote code execution via malicious Document vector. Nothing new or fancy here, just a list of techniques, tools and scripts collected in one place for a quick glimpse of an eye before setting a payload.

All of the below examples had been generated for using as a remote address: 192.168.56.101.

List:

Page substiution macro for luring user to click Enable Content
The Unicorn Powershell based payload

React Native "Hello World" Android App on Windows via PowerShell or Windows Subsystem for Linux

(normally and trough a corporate proxy server)

Content Table

1 Via PowerShell
   1.0 Configure proxy settings via PowerShell terminal
      1.0.1 Create general variables
      1.0.2 Set system global proxy Environment variables
      1.0.3 Import global system proxy values to PowerShell teminal
      1.0.4 Disable automatic detection of proxy setting\

	<!doctype html>
	<html>
	<head>
	<meta charset="utf-8" />
	<script src="https://unpkg.com/three"></script>
	<script
	src="https://unpkg.com/three/examples/js/loaders/GLTF2Loader.js"
	></script>
	<script src="script.js" defer="defer"></script>
	</head>

	$assemblies=(
	"System"
	)

	$source=@"
	using System;
	namespace Helloworld
	{
	public static class Hello{
	public static void Main(){

	# installs the browser-based editor Codiad
	#
	# call via:
	# bash <(wget -qO- https://gist.githubusercontent.com/rnauber/9f579d1480db4cc5a9a3c97c00c52fb9/raw/install_codiad.sh )
	#

	DEST="$HOME/codiad"
	ADDR=127.0.0.1:9876

	echo -e "\033[1;32m Installing prerequisites... \033[0m"

	0.0.0.0
	root /srv/app/public
	gzip
	fastcgi / 127.0.0.1:9000 php
	rewrite {
	regexp .*
	ext /
	to /index.php?{query}
	}

	---
	apiVersion: extensions/v1beta1
	kind: DaemonSet
	metadata:
	name: oom-killer
	namespace: kube-system
	labels:
	k8s-app: oom-killer
	spec:
	selector:

Konstantin Mokhnatkin sub314xxl

React Native "Hello World" Android App on Windows via PowerShell or Windows Subsystem for Linux

(normally and trough a corporate proxy server)

Content Table

Table of Contents

set -e, -u, -x, -o pipefail

	#!/usr/bin/env bash
	cd ~/
	mkdir -p ~/.local/bin
	wget "https://discordapp.com/api/download/canary?platform=linux&format=tar.gz" -O discord.tar.gz
	tar -xvf discord.tar.gz -C ~/.local/bin
	sudo ln -s ~/.local/bin/DiscordCanary/discord.png /usr/share/icons/discord.png
	sudo ln -s ~/.local/bin/DiscordCanary/DiscordCanary /usr/bin
	wget https://gist.githubusercontent.com/AdrianKoshka/a12ca0bfe2f334a9f208aff72f8738c3/raw/9d606ad7ce7cc1dd23f6a99993e2396540538a02/discord.desktop -O discord.desktop
	mkdir -p ~/.local/share/applications/
	mv ~/discord.desktop ~/.local/share/applications/

	<html>
	<head>
	<script type="text/javascript" src="https://www.gstatic.com/charts/loader.js"></script>
	<script type="text/javascript">

	// This is a quick hack to be able to see Gantt-like Timelines of gitlab build pipelines.
	// It makes it easier to diagnose the running time of the pipelines and understand resource usage.
	// Ideally, gitlab would directly provide such a view in its frontend.

	google.charts.load('current', {'packages':['gantt']});