IDA Plugins | Preferred | Neutral | Unreviewed |
---|
#include <stdio.h> | |
#include <windows.h> | |
#include "peconv.h" | |
const size_t g_flagLen = 26; | |
char g_flag[g_flagLen + 1] = { 0 }; | |
int my_index() | |
{ | |
static int index = 0; |
$dotnetpath = "/usr/local/share/dotnet/dotnet"; | |
$sharpgenpath = "/Users/dtmsecurity/Tools/SharpGen/bin/Debug/netcoreapp2.1/SharpGen.dll"; | |
$temppath = "/tmp/"; | |
beacon_command_register("sharpgen", "Compile and execute C-Sharp","Synopsis: sharpgen [code]\n"); | |
alias sharpgen{ | |
$executionId = "sharpgen_" . int(rand() * 100000); | |
$temporaryCsharp = $temppath . $executionId . ".cs"; | |
$executableFilename = $temppath . $executionId . ".exe"; |
Module | Function | |
---|---|---|
C:\Windows\System32\advpack.dll | DelNodeRunDLL32W | |
C:\Windows\System32\advpack.dll | DelNodeRunDLL32A | |
C:\Windows\System32\advpack.dll | DelNodeRunDLL32 | |
C:\Windows\System32\ConnectedAccountState.dll | ActionCenterRunDllW | |
C:\Windows\System32\cryptcatsvc.dll | CatDbOfflineRebuildDatabasesRundll32W | |
C:\Windows\System32\cscui.dll | CSCOptions_RunDLLW | |
C:\Windows\System32\cscui.dll | CSCOptions_RunDLLA | |
C:\Windows\System32\cscui.dll | CSCOptions_RunDLL | |
C:\Windows\System32\devmgr.dll | DeviceProblenWizard_RunDLLW |
The following information illustrates the differences between macOS, Windows and Linux in USB device enumeration sequence.
Specifically the comparison covers USB Mass Storage device enumeration, implemented with the TamaGo USB driver on a USB armory Mk II running armory-ums.
-- challenge 1: | |
From the name of the challenge it was a dead giveway that there was a .git folder exposed. | |
Then just find out where the git repo is hosted: | |
curl http://0x70.apl3b.com/.git/config | |
And get the repo hosting service: | |
https://gitlab.com/DDuarte/twipy.git | |
Finally check all the commits and on this one at the bottom of the page you can read a flag: |
$CimSession = New-CimSession -ComputerName 10.0.0.2 | |
$FilePath = 'C:\Windows\System32\notepad.exe' | |
# PS_ModuleFile only implements GetInstance (versus EnumerateInstance) so this trick below will force a "Get" operation versus the default "Enumerate" operation. | |
$PSModuleFileClass = Get-CimClass -Namespace ROOT/Microsoft/Windows/Powershellv3 -ClassName PS_ModuleFile -CimSession $CimSession | |
$InMemoryModuleFileInstance = New-CimInstance -CimClass $PSModuleFileClass -Property @{ InstanceID= $FilePath } -ClientOnly | |
$FileContents = Get-CimInstance -InputObject $InMemoryModuleFileInstance -CimSession $CimSession | |
$FileLengthBytes = $FileContents.FileData[0..3] | |
[Array]::Reverse($FileLengthBytes) |
chrome://-alkuisissa | |
chrome://-nettadresser | |
chrome://-webbadresser | |
chrome://ChromeTestChromeWebUIControllerFactory | |
chrome://DummyURL | |
chrome://URLs | |
chrome://about | |
chrome://accessibility | |
chrome://anything | |
chrome://app-list |
|=-----------------------------------------------------------------------=| | |
|=-------------=[ 3 Years of Attacking JavaScript Engines ]=-------------=| | |
|=-----------------------------------------------------------------------=| | |
|=------------------------------=[ saelo ]=------------------------------=| | |
|=-----------------------------------------------------------------------=| | |
The following are some brief notes about the changes that have taken place | |
since the release of the "Attacking JavaScript Engines" paper [1]. In | |
general, no big conceptional changes have happened since. Mitigations have | |
been added to break some of the presented techniques and, as expected, a |
I've worked with AngularJS for many years now and still use it in production today. Even though you can't call it ideal, given its historically-formed architecture, nobody would argue that it became quite a milestone not only for evolution of JS frameworks, but for the whole web.
It's 2017 and every new product/project has to choose a framework for development. For a long time I was sure that new Angular 2/4 (just Angular below) will become the main trend for enterprise development for years to come. I wasn't even thinking of working with something else.
Today I refuse to use it in my next project myself.