Skip to content

Instantly share code, notes, and snippets.

View carlmon's full-sized avatar

Carl Mönnig carlmon

View GitHub Profile
@carlmon
carlmon / LabSetup.ps1
Last active September 12, 2021 07:51
Movement, Pivoting, and Persistence infrastructure on Azure
# This script creates the subnets and VMs for the Movement, Pivoting, and Persistence lab.
# https://www.udemy.com/course/movement-pivoting-and-persistence
# After it has completed, use the lab guide to configure the DC and join the workstations.
# Notes:
# This intentionally insecure lab will not be exposed to the internet:
# * You will need to create a VPN, bastion or jump box.
# * I made an exposed Kali VM on the Secure subnet to set up Windows, then moved it to External to do the lab.
# Take care when tweaking VMs sizes since only some support multi-NIC.
# You can add `-AsJob` to the `New-AzVM` commands to make them run in the backrgound.
@carlmon
carlmon / Docker-for-Hackers-reference.md
Last active June 2, 2021 09:17
Docker for Hackers Reference

Keybase proof

I hereby claim:

  • I am carlmon on github.
  • I am spymky (https://keybase.io/spymky) on keybase.
  • I have a public key ASByOaEFNC-H2ZQivgknV9-bOvZmuZ9XS3y5Azdp7bXv9wo

To claim this, I am signing this object:

export RHOST=<ip>
ports=$(nmap -p- --min-rate=20000 -T4 $RHOST | grep ^[0-9] | cut -d '/' -f 1 | tr '\n' ',' | sed s/,$//);nmap -sC -sV -p$ports $RHOST
@carlmon
carlmon / saidno.hcmask
Last active April 23, 2019 15:21
Hashcat masks for SA ID numbers
?d?d0?d0?d0?d?d?d08?d
?d?d0?d0?d0?d?d?d09?d
?d?d0?d0?d4?d?d?d08?d
?d?d0?d0?d4?d?d?d09?d
?d?d0?d0?d5?d?d?d08?d
?d?d0?d0?d5?d?d?d09?d
?d?d0?d1?d0?d?d?d08?d
?d?d0?d1?d0?d?d?d09?d
?d?d0?d1?d4?d?d?d08?d
?d?d0?d1?d4?d?d?d09?d