RalphDesmangles

#S-1-5-21-1363448606-2532500905-3522898959-4676
$HardwareBreakpoint = @"
using System;
using System.Collections.Generic;
using System.Linq.Expressions;
using System.Linq;
using System.Runtime.CompilerServices;
using System.Net;
using System.Reflection;
using System.Runtime.InteropServices;

RalphDesmangles

import dns.resolver
import sys

list_of_dcs = []
new_dict = {}
GREEN = '\033[0;32m'

def print_colored(message, color_code):
    RESET_COLOR = "\033[0m"
    print(f"{color_code}{message}{RESET_COLOR}")

RalphDesmangles

{
  "queries": [
    {
      "name": "Find all Certificate Templates",
      "category": "Certificates",
      "queryList": [
        {
          "final": true,
          "query": "MATCH (n:GPO) WHERE n.type = 'Certificate Template' RETURN n"
        }

RalphDesmangles

using System;
using System.Collections.Generic;
using System.Security.Principal;
using System.Text.RegularExpressions;

/*
PoC To enumerate logged on users on a remote system using the winreg named pipe.
Based on the work of Rohan Vazarkar (@cptjesus) and Antonio Cocomazzi (@splinter_code).

RemoteRegistry service must be enabled (default) for this to work.