ypcrts

#!/bin/sh
#
# If your shell is returning an error on initialization, it makes tmux-server di.
# This gist shows how to work around that.  Googling shows that this happens to
# zsh users a lot.
#
# `autoload: command not found`
# `bashcompinit: command not found`
# `server_signal: Child exited`
# `connect failed: Connection refused`

ypcrts

# Useful references:
#
# https://superuser.com/questions/992511/emulate-a-keyboard-button-via-the-command-line
# https://ss64.com/vb/sendkeys.html
# https://social.technet.microsoft.com/Forums/windowsserver/en-US/96b339e2-e9da-4802-a66d-be619aeb21ac/execute-function-one-time-in-every-10-mins-in-windows-powershell?forum=winserverpowershell
# https://learn-powershell.net/2013/02/08/powershell-and-events-object-events/
#
# Future enhancements - use events rather than an infinite loop
while (1) {
  $wsh = New-Object -ComObject WScript.Shell

ypcrts

::###############################################################################################################
:: Credits and More info: https://gist.github.com/mackwage/08604751462126599d7e52f233490efe
::                        https://github.com/LOLBAS-Project/LOLBAS
::                        https://lolbas-project.github.io/
::                        https://github.com/Disassembler0/Win10-Initial-Setup-Script
::                        https://github.com/cryps1s/DARKSURGEON/tree/master/configuration/configuration-scripts
::                        https://gist.github.com/alirobe/7f3b34ad89a159e6daa1#file-reclaimwindows10-ps1-L71
::                        https://github.com/teusink/Home-Security-by-W10-Hardening
::
::###############################################################################################################

ypcrts

 # disable smb 1
 Disable-WindowsOptionalFeature -Online -FeatureName smb1protocol           
 
 # disable smb2 / smb3
 Set-SmbServerConfiguration -EnableSMB2Protocol $false

ypcrts

Office 365 office.com Distribution List Scraper using Browser console

This grabs the distribution list members and email addresses, outputting them as CSV

ypcrts

#!/usr/bin/python

# -*- coding: utf-8 -*-

'''
	distccd v1 RCE (CVE-2004-2687)
	
	This exploit is ported from a public Metasploit exploit code :
		https://www.exploit-db.com/exploits/9915

ypcrts

const j = new Set;

document.querySelectorAll('.actor-name').forEach(e => j.add(e.innerText));

document.querySelector('#ember2469').click();

ypcrts

import requests
import os
import os.path
import re

# using fuzzdb webshell
# https://github.com/tennc/webshell/blob/master/fuzzdb-webshell/asp/cmd.aspx
shell_url = 'https://example.com/vulnerable'

cmd_output_re = re.compile(r'.*\<pre\>(.*)\</pre\>', re.DOTALL)

ypcrts

(function () { 
  var s = new Set();
  document.querySelectorAll('.actor-name').forEach( e=> { 
    s.add(e.innerText)
  });
  console.log(s)
})()

ypcrts

package main
import "net/http"
import "fmt"
import "io/ioutil"
import "bufio"
import "os"

// golang virtualhost bruteforcer with concurrency

func makeRequest(subdomain string) bool {