vforvasilis

Provisioning Prefect Server on GCP using Terraform

Requirements: Terraform, GCP credentials with permission to create a project Tested with: Terraform v0.12.23, google cloud provider v3.26

To run:

You can use an environment variable to set which service account key to use during provisioning export GOOGLE_APPLICATION_CREDENTIALS=/path/to/key The service account you use must belong to a GCP project that has the necessary APIs enabled (such as billing and resource manager)--if it does not, you may have to enable these APIs manually along the way in those projects In this directory, run terraform init then terraform apply -- you will need to provide a billing_id and organization_id for your GCP project

Once successful, be sure to add the following to your ~/.prefect/config.toml

#cat targets_urls.txt                
http://public-firing-range.appspot.com

Command Line

gospider -S targets_urls.txt -c 10 -d 5 --blacklist ".(jpg|jpeg|gif|css|tif|tiff|png|ttf|woff|woff2|ico|pdf|svg|txt)" --other-source | grep -e "code-200" | awk '{print $5}'| grep "=" | qsreplace -a | dalfox pipe -o result.txt

https://github.com/jaeles-project/gospider

Distributed computation

Libraries:

Dask distributed is a lightweight library for distributed computing
Ray - is a distributed execution framework
Celery - Distributed Task Queue
Redis Queue - is a simple Python library for queueing jobs
Apache Flink - Stateful Computations over Data Streams
Apache Spark - Lightning-fast unified analytics engine
JobLib

Target

Start Chrome with the following flags:

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"

--remote-debugging-port=9222

--remote-debugging-address=0.0.0.0

Kerberos cheatsheet

Bruteforcing

With kerbrute.py:

python kerbrute.py -domain <domain_name> -users <users_file> -passwords <passwords_file> -outputfile <output_file>

With Rubeus version with brute module:

	www,719407
	api,69552
	eks,67581
	svc,67131
	cloudapp,65945
	vpn,55659
	bastion,53840
	ax,40676
	dev,38756
	operations,35663

	import re
	import sys


	urls=[]
	try:
	file_name=sys.argv[1]
	replacement=sys.argv[2]
	except:
	print("[!] Enter urls file name")

	<Project ToolsVersion="4.0" xmlns="http://schemas.microsoft.com/developer/msbuild/2003" >
	<Target Name="Hello" >

	<!-- Call ANY .NET API -->
	<!--

	Author: Casey Smith, Twitter: @subTee

	License: BSD 3-Clause

	// $ frida -l antiroot.js -U -f com.example.app --no-pause
	// CHANGELOG by Pichaya Morimoto ([email protected]):
	// - I added extra whitelisted items to deal with the latest versions
	// of RootBeer/Cordova iRoot as of August 6, 2019
	// - The original one just fucked up (kill itself) if Magisk is installed lol
	// Credit & Originally written by: https://codeshare.frida.re/@dzonerzy/fridantiroot/
	// If this isn't working in the future, check console logs, rootbeer src, or libtool-checker.so
	Java.perform(function() {

	var RootPackages = ["com.noshufou.android.su", "com.noshufou.android.su.elite", "eu.chainfire.supersu",

	#!/data/data/com.termux/files/usr/bin/sh
	#android Tor+bridge installer
	## get new bridges from: https://bridges.torproject.org/bridges?transport=obfs4
	## and edit with:
	####$ vi $PREFIX/etc/tor/torrc
	## or
	## look sample:
	####$ pkg install curl -y
	####$ curl -L https://git.io/fjK3Y -o atba.sh
	####$ bash ./atba.sh