Atila Romero atilaromero

## mountmmls.sh
mountmmls() {
  mmls "${1}" | tail -n+7 | while read -ra i
  do
    [ ${i[1]} == ------- ] && continue
    [ ${i[1]} == Meta ] && continue
    echo mkdir -p vol${i[0]%:}
    echo mount "${1}" vol${i[0]%:} -o ro,offset=$[${i[2]##+(0)} * 512],sizelimit=$[${i[4]##+(0)}*512]
  done
}

## list bookmarks.sh
sqlite3 places.sqlite 'SELECT b.url FROM moz_bookmarks AS a JOIN moz_places AS b ON a.fk = b.id'

## createVMDK.sh
VBoxManage internalcommands createrawvmdk -filename imagemHD.vmdk -rawdisk imagemHD.dd

## convert vbox image
VBoxManage clonehd '{ff460fde-fac8-48b7-afbb-251ab0dc9342}' ff460fde-sdcard.dd --format RAW

## gist:5644bfb13c43ef3810118d2975a856e1
kubectl run -i --tty --rm alpine --image=alpine --restart=Never -- sh

## gist:f5695169724941d17e7ed99965c23dae
cat /proc/net/fib_trie

## grep big file
stdbuf -i0 -o0 -e0 cat image.dd | tr '\000' '\n' | parallel --pipe --block 1G --recend '' grep -Fabf keywords.txt --label={#} -H | tee results.srch

## reset windows password
/Windows/System32/sethc.exe :StickKeys (press shift 5 times)

control userpasswords2
net user administrator /active:yes

## explorer as administrator
Kill Explorer shell by holding down Shift+Ctrl, right-clicking the Shut down button in the Start Menu, and selecting Exit Explorer
Start Task Manager with Ctrl+Shift+Esc
Elevate Task Manager privileges by going to Processes tab and selecting Show processes from all users
Then start up a new instance of the shell by File | Run in Task Manager, typing in explorer, and selecting the Create this task with administrative privileges.

## ShellBags
HKCU\Software\Microsoft\Windows\Shell\Bags
	mountmmls() {
	mmls "${1}" \| tail -n+7 \| while read -ra i
	do
	[ ${i[1]} == ------- ] && continue
	[ ${i[1]} == Meta ] && continue
	echo mkdir -p vol${i[0]%:}
	echo mount "${1}" vol${i[0]%:} -o ro,offset=$[${i[2]##+(0)} * 512],sizelimit=$[${i[4]##+(0)}*512]
	done
	}
	/Windows/System32/sethc.exe :StickKeys (press shift 5 times)

	control userpasswords2
	net user administrator /active:yes
	Kill Explorer shell by holding down Shift+Ctrl, right-clicking the Shut down button in the Start Menu, and selecting Exit Explorer
	Start Task Manager with Ctrl+Shift+Esc
	Elevate Task Manager privileges by going to Processes tab and selecting Show processes from all users
	Then start up a new instance of the shell by File \| Run in Task Manager, typing in explorer, and selecting the Create this task with administrative privileges.