More info about the CVE: https://blog.qwertysecurity.com/Articles/blog3.html
# check Cronjobs with:
Get-ScheduledTask | Where-Object {$_.State -eq 'Ready'}
| ' ----------------------------- | |
| ' ReplyToMultipleSendersBCC.bas | |
| ' _____________________________ | |
| ' | |
| ' (c) 2025 - suuhm | |
| ' ----------------------------- | |
| Sub ReplyToMultipleSendersBCC() | |
| Dim selectedMail As MailItem | |
| Dim selection As Selection |
| # -*- coding: utf-8 -*- | |
| # | |
| # Microsoft GraphAPI | |
| # ------------------ | |
| # Get Azure Ad Users and Sentinel Incidents | |
| # | |
| # v0.1 - (C) 2024 by suuhm | |
| # |
| #!/bin/bash | |
| # | |
| # UDP PUNCH-OUT! UDP-HOLE PUNCHING | |
| # --------------------------------- | |
| # | |
| # local send: From: 1.1.1.1:13337 -> remote-ip:RANDOM | |
| # remote send: From: remote-ip:RANDOM -> 1.1.1.1:13337 | |
| # | |
| _use_udp_hp() |
| #!/bin/bash | |
| # | |
| # "=========================" | |
| # "FTP Directory Downloader " | |
| # " ----------------------- " | |
| # " Xtrtact & AV scanning " | |
| # " ----------------------- " | |
| # " (c) 2024 by suuhmer " | |
| # "=========================" |
| # Requires the Active Directory module | |
| Import-Module ActiveDirectory | |
| Write-Host "************************************" | |
| Write-Host "* Get Active Directory Information *" | |
| Write-Host "* (C) 204 By suuhmer *" | |
| Write-Host "************************************" | |
| Write-Host "" | |
| # List users |
| @echo off | |
| echo Get CBS.logs (sfc /scannow) | |
| echo\ | |
| set "logPath=C:\Windows\Logs\CBS\CBS.log" | |
| set "searchString=Failed to pin deployment while resolving Update" | |
| for /f "tokens=*" %%a in ('findstr /c:"%searchString%" "%logPath%"') do ( | |
| set "errorLine=%%a" | |
| ) |
| @echo off | |
| SETLOCAL ENABLEEXTENSIONS | |
| REM 424_tunnel script (c) 2024 suuhm | |
| REM netsh interface ipv4 set interface "Ethernet" forwarding=enabled | |
| REM netsh interface portproxy add v4tov4 listenaddress=lokal_IP listenport=9999 connectaddress=target_IP connectport=80 | |
| REM netsh interface portproxy show all | |
| #!/bin/bash | |
| # hashes only: | |
| #grep -Eo "\b[a-f0-9]{32}\b" hashes.txt > md5-hashes.txt | |
| # Mails:Hashes extract from your textfile: | |
| sed -nE "s/.*'([a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,})'.*'([a-f0-9]{32})'.*/\1:\2/p" your_text_file.txt > mail-md5.txt | |
| # Crack hashes with usernames: | |
| hashcat -a0 -m0 --username --potfile-path mail_md5.potfile mail-md5.txt /usr/share/wordlists/rockyou.txt.gz |
| @echo off | |
| SET mypath=%~dp0 | |
| echo %mypath:~0,-1% | |
| pushd %~dp0 | |
| echo\ | |
| REM popd | |
| REM !!! YOU NEED PSEXEC !!! | |
| REM DOWNLOAD zip package incl psexec: |