Gist to support https://www.youtube.com/watch?v=KsTMy0920go
https://github.com/darinpope/java-web-app
use the sonar branch
| title: Suspicious msdt.exe execution - Office Exploit | |
| id: 97a80ed7-1f3f-4d05-9ef4-65760e634f6b | |
| status: experimental | |
| description: This rule will monitor suspicious arguments passed to the msdt.exe process. These arguments are an indicator of recent Office/Msdt exploitation. | |
| references: | |
| - https://doublepulsar.com/follina-a-microsoft-office-code-execution-vulnerability-1a47fce5629e | |
| - https://twitter.com/MalwareJake/status/1531019243411623939 | |
| author: 'Matthew Brennan' | |
| tags: | |
| - attack.execution |
Gist to support https://www.youtube.com/watch?v=KsTMy0920go
https://github.com/darinpope/java-web-app
use the sonar branch
Gist to support https://youtu.be/3XzVOxvNpGM
git clone https://github.com/open-telemetry/opentelemetry-collector.gitcd opentelemetry-collector/examples/demo/docker-compose up -dGist to support https://youtu.be/3H9eNIf9KZs
Updated 2023-12-11: Hosts calculation updated to support CIDR or 31 and 32.
Prerequisites:
The below formulas then go into C1, D1 etc. to perform the various calculations. Some calculations depends on other calculations.
| cd\Program Files\Microsoft Office\Office16 | |
| cd\Program Files (x86)\Microsoft Office\Office16 | |
| cscript OSPP.VBS /sethst:kms.digiboy.ir | |
| cscript OSPP.VBS /actcscript OSPP.VBS /dstatus | |
| slmgr.vbs /ckms |
| Filter | Description | Example |
|---|---|---|
| allintext | Searches for occurrences of all the keywords given. | allintext:"keyword" |
| intext | Searches for the occurrences of keywords all at once or one at a time. | intext:"keyword" |
| inurl | Searches for a URL matching one of the keywords. | inurl:"keyword" |
| allinurl | Searches for a URL matching all the keywords in the query. | allinurl:"keyword" |
| intitle | Searches for occurrences of keywords in title all or one. | intitle:"keyword" |
| // 1. Open the browser developper console on the network tab | |
| // 2. Start the video | |
| // 3. In the dev tab, locate the load of the "master.json" file, copy its full URL | |
| // 4. Run: node vimeo-downloader.js "<URL>" | |
| // 5. Combine the m4v and m4a files with mkvmerge | |
| const fs = require('fs'); | |
| const url = require('url'); | |
| const https = require('https'); |
| #!/usr/local/bin/python3 | |
| ###################################################################################################################### | |
| # Purpose: Generate rules report of all the security groups # | |
| # Input Params: None [Make sure to set AWS CLI session by populating env. vars. with keys.] # | |
| # Usage: ./ec2_sg_rules.py > account-date.csv [python ./ec2_sg_rules.py > gill-dev-sg-2018-04-11.csv] # | |
| # Author: Abdul Gill # | |
| # Doc. Ref: http://boto3.readthedocs.io/en/latest/reference/services/ec2.html#EC2.Client.describe_security_groups# | |
| ###################################################################################################################### | |
| from __future__ import print_function |