Dan Borges ahhh

## bypass_uac.ps1
# Powershell script to bypass UAC on Vista+ assuming
# there exists one elevated process on the same desktop.
# Technical details in:
# https://tyranidslair.blogspot.co.uk/2017/05/reading-your-way-around-uac-part-1.html
# https://tyranidslair.blogspot.co.uk/2017/05/reading-your-way-around-uac-part-2.html
# https://tyranidslair.blogspot.co.uk/2017/05/reading-your-way-around-uac-part-3.html
# You need to Install-Module NtObjectManager for this to run.

Import-Module NtObjectManager

## gist:7643cd8705697a4b5302edad1b41ee37
PowerShell.exe -com {$file=(gi c:\demo\test.txt);$date='01/03/2006 12:12 pm';$file.LastWriteTime=$date;$file.LastAccessTime=$date;$file.CreationTime=$date}

## ARD Kickstarter (vuln)
sudo /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -activate -configure -access -on -clientopts -setvnclegacy -vnclegacy yes -clientopts -setvncpw -vncpw mypasswd -restart -agent -privs -all

## DllMainThread.c
//   Dll Hijacking via Thread Creation
// Author - Vivek Ramachandran
//  Learn Pentesting Online --  http://PentesterAcademy.com/topics and http://SecurityTube-Training.com
// Free Infosec Videos --  http://SecurityTube.net


#include <windows.h>
#define SHELLCODELEN	2048

## gethelp.cs
using System;
using System.Net;
using System.Diagnostics;
using System.Reflection;
using System.Configuration.Install;
using System.Runtime.InteropServices;

/*
Author: Casey Smith, Twitter: @subTee
License: BSD 3-Clause

## Change Windows Network Profile
Get-NetConnectionProfile

Set-NetConnectionProfile -InterfaceIndex <index number> -NetworkCategory Private

## ManagedInstalls.plist
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>ClientIdentifier</key>
    <string>arbitrary_name</string>
    <key>SoftwareRepoURL</key>
    <string>https://your_munki_server.com/munki_repo</string>
    <key>LoggingLevel</key>
    <integer>1</integer>

## ShellcodeRDI.go
package main

/*
*
*  This is just a Go implementation of https://github.com/monoxgas/sRDI/
*  Useful if you're trying to generate shellcode for reflective DLL
*  injection in Go, otherwise probably not much use :)
*
*  The project, shellcode, most comments within this project
*  are all from the original project by @SilentBreakSec's Nick Landers (@monoxgas)

## google drive search filters
-owner:me      # files not owned by me
source:domain  # all files in the domain

## gobuster_looper.sh
#!/bin/bash
filename='ips.txt'
outdir=$filename"_out/"
mkdir $outdir
filelines=`cat $filename`
echo Start
for line in $filelines ; do
urls="https://"$line"/"
outfile=$outdir$line
./gobuster -k -u $urls -w ./wordlist.txt -o $outfile
	# Powershell script to bypass UAC on Vista+ assuming
	# there exists one elevated process on the same desktop.
	# Technical details in:
	# https://tyranidslair.blogspot.co.uk/2017/05/reading-your-way-around-uac-part-1.html
	# https://tyranidslair.blogspot.co.uk/2017/05/reading-your-way-around-uac-part-2.html
	# https://tyranidslair.blogspot.co.uk/2017/05/reading-your-way-around-uac-part-3.html
	# You need to Install-Module NtObjectManager for this to run.

	Import-Module NtObjectManager
	// Dll Hijacking via Thread Creation
	// Author - Vivek Ramachandran
	// Learn Pentesting Online -- http://PentesterAcademy.com/topics and http://SecurityTube-Training.com
	// Free Infosec Videos -- http://SecurityTube.net



	#include <windows.h>
	#define SHELLCODELEN 2048
	using System;
	using System.Net;
	using System.Diagnostics;
	using System.Reflection;
	using System.Configuration.Install;
	using System.Runtime.InteropServices;

	/*
	Author: Casey Smith, Twitter: @subTee
	License: BSD 3-Clause
	Get-NetConnectionProfile

	Set-NetConnectionProfile -InterfaceIndex <index number> -NetworkCategory Private
	<?xml version="1.0" encoding="UTF-8"?>
	<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
	<plist version="1.0">
	<dict>
	<key>ClientIdentifier</key>
	<string>arbitrary_name</string>
	<key>SoftwareRepoURL</key>
	<string>https://your_munki_server.com/munki_repo</string>
	<key>LoggingLevel</key>
	<integer>1</integer>
	package main

	/*
	*
	* This is just a Go implementation of https://github.com/monoxgas/sRDI/
	* Useful if you're trying to generate shellcode for reflective DLL
	* injection in Go, otherwise probably not much use :)
	*
	* The project, shellcode, most comments within this project
	* are all from the original project by @SilentBreakSec's Nick Landers (@monoxgas)
	-owner:me # files not owned by me
	source:domain # all files in the domain
	#!/bin/bash
	filename='ips.txt'
	outdir=$filename"_out/"
	mkdir $outdir
	filelines=`cat $filename`
	echo Start
	for line in $filelines ; do
	urls="https://"$line"/"
	outfile=$outdir$line
	./gobuster -k -u $urls -w ./wordlist.txt -o $outfile