FrankSpierings

### Add this specific input

- input_type: log
  paths:
    - /var/log/ufw.log
  tags: ["iptables"]

FrankSpierings

//Use this function to show an object's contents.
function showObject(obj) {
	var result = null
	if (obj && obj.constructor === Array) {
		result = []
	}
	else if (obj === null) {
		return null
	}
	else {

FrankSpierings

FROM ubuntu:latest
MAINTAINER Frank Spierings

# Base setup
RUN dpkg --add-architecture i386 && \
    apt-get update && apt-get upgrade -y && \
    apt-get install libstdc++6:i386 -y

# Locales setup
RUN apt-get install locales -y && locale-gen en_US.UTF-8

FrankSpierings

[
	{ "keys": ["ctrl+alt+r"], "command": "run_macro_file", "args": {"file": "Packages/User/http_request_response.sublime-macro"} },	
]

FrankSpierings

Wireshark over SSH

X11Forwarding (slow)

ssh username@servername -Y wireshark

Remote capture - packet forwarding (fast)

FrankSpierings

curl -fsSL https://download.docker.com/linux/debian/gpg | sudo apt-key add -
sudo apt-key fingerprint 0EBFCD88
echo "Check the key: 9DC8 5822 9FC7 DD38 854A E2D8 8D81 803C 0EBF CD88"
sleep 10

echo "deb [arch=amd64] https://download.docker.com/linux/debian stretch stable" > /etc/apt/sources.list.d/docker.list
sudo apt-get update
sudo apt-get install docker-ce -y

FrankSpierings

# cd /tmp/; git clone https://github.com/ropnop/windapsearch.git
# apt install python-ldap

# Find (nested) Domain Admins
windapsearch.py --dc-ip 10.0.0.1 -u 'user01@lab.test' -p "Password123!" --da

# Find computers and resolve
./windapsearch.py --dc-ip 10.0.0.1 -u 'user01@lab.test' -p "Password123!" -C -r

# Export all data and show in columns on the commandline

FrankSpierings

function ProgressHack() {
	progressObject = null
	intProgress = Interceptor.attach(Module.findExportByName("libRealRacing3.so", "_ZNK10Characters14CareerProgress16IsStreamUnlockedEi"), {
		onEnter: function(args) {
			progressObject = args[0]
		},
		onLeave: function(result) {
		}
	});

FrankSpierings

#!/usr/bin/env python2
from Crypto.Cipher import AES
from base64 import b64encode
from Crypto.Protocol import KDF
from Crypto.Random import get_random_bytes
import sys
import argparse
import string
import random

FrankSpierings

Function.prototype.clone = function() {
    var that = this;
    var name = this.name;
    var hooked = function() {
    	console.trace('[' + name + '] Pre hook log: ' + JSON.stringify(arguments));
    	result = that.apply(this, arguments);
    	console.trace('[' + name + '] Post hook log: ' + JSON.stringify(result));
    	return result;
    };
    for(var key in this) {