Meatballs1

# Ways to execute a shell script in Ruby
# Example Script - Joseph Pecoraro

cmd = "echo 'hi'" # Sample string that can be used

# 1. Kernel#` - commonly called backticks - `cmd` 
# This is like many other languages, including bash, PHP, and Perl
#  Returns the result of the shell command
#  Docs: http://ruby-doc.org/core/classes/Kernel.html#M001111

Meatballs1

### Keybase proof

I hereby claim:

  * I am meatballs1 on github.
  * I am meatballs (https://keybase.io/meatballs) on keybase.
  * I have a public key whose fingerprint is 3F50 A6C9 42C9 0046 D070  AC76 5380 EAF0 1F2F 8B38

To claim this, I am signing this object:

Meatballs1

Here are the additional steps I had to put in place on a Kali linux VM
to integrate BeEF and pishing-frenzy using mod_proxy as a reverse
proxy. I'm certain this could be done more elegantly but this worked
for my immediate needs. I'll also mention the evasion techniques
within BeEF work amazing well.

Install mod_proxy
apt-get install -y libapache2-mod-proxy-html libxml2-dev

enable mod_proxy

Meatballs1

using System;
using System.Diagnostics;
using System.Reflection;
using System.Configuration.Install;
using System.Runtime.InteropServices;
 
/*
Author: Casey Smith, Twitter: @subTee
License: BSD 3-Clause
Step One:

Meatballs1

echo -----BEGIN CERTIFICATE----- > encoded.txt
echo Just Base64 encode your binary data
echo TVoAAA== >> encoded.txt
echo -----END CERTIFICATE----- >> encoded.txt
certutil -decode encoded.txt decoded.bin

Meatballs1

# cat /usr/syno/etc.defaults/rc.d/S01iptables_nat.sh
# Script to enable port forwarding and IP Masquerading, to share
# the wireless connection to the ethernet port of ds213air
# e.g. computer -> eth0 -> diskstation -> wlan0 -> router -> interwebs

# Enable port forwarding, in case not enabled by default
echo 1 > /proc/sys/net/ipv4/ip_forward

# Load the required modules
/usr/syno/etc.defaults/rc.d/S01iptables.sh load_nat_mod forwarding_test

Meatballs1

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1.4.12 (GNU/Linux)

mQINBFJFrzwBEADOUjrwsvh+2i+Wd1oGmizodnYLMLqnPbzqJDAzlfobkGBV3Sq0
T1NyTdA0IdQ2/rxXJ0GemUqbWlZXzFlMimPycFrqjXvh/nkp3SLHl2eAsgs8raSb
PYCdOaEyo+jFV09vpmPnZu7gCQGFENiRXH9UcaiwIZULKePrxfnf5ZR/Ib1brNAg
NtIMURZmylvB3JaZsImC6+ZRYRtIyd6vFSbbj1EueqPsG+zuQ3CAGOL/tKAxIn8M
snjVOP3UqED9Zz5RLcGzto7de/5LF/7SHxIhuxqr03xeOoH+NUnlqpe346Sqrx+f
tJljlAmeKj49oTGVYm3SwfEF1D+G5t+YoVB+edLS5gRb1rSsJmz/azDQHT75IFkD
Mz8jVJKTkJL9ZiekfVWo6LZm2sJ5LKKb31D8xqUF6O+8gj+QNKAnB+ExGeXmA65y

Meatballs1

$path = "C:\data\sysvol_results.csv"
$inStream = new-object System.IO.FileStream($path, [System.IO.FileMode]::Open);
$outStream = new-object System.IO.FileStream("$($path).gz", [System.IO.FileMode]::CreateNew);
$compressionStream = new-object System.IO.Compression.GZipStream($outStream, [System.IO.Compression.CompressionMode]::Compress);
$inStream.CopyTo($compressionStream);
$inStream.Close();
$compressionStream.Close();
$outStream.Close();

Meatballs1

RETURN apoc.text.join(apoc.coll.randomItems(split("abcdefghijklmnopqrstuvwxyz0123456789",""), 12, true),"")

Meatballs1

MATCH (u:user)
WITH u, apoc.text.join(apoc.coll.randomItems(split("abcdefghijklmnopqrstuvwxyz0123456789",""), 12, true),"") as identifier
SET u.name=identifier
RETURN COUNT(u)