crazy hugsy hugsy

## ProcessHollower.c
/**
 *
 * ProcessHollower:  Hide a executable inside the runtime of another one
 *
 * Compile with
 * C:> cl.exe ProcessHollower.c
 *
 * Execute with:
 * C:> ProcessHollower.exe notepad.exe myevilbinary.exe
 *

## english-adjectives.txt
abandoned
able
absolute
adorable
adventurous
academic
acceptable
acclaimed
accomplished
accurate

## PatchClean.ps1

<#
================
PATCHCLEAN.PS1
=================
Version 1.0 Patch Folder Cleaner by Greg Linares (@Laughing_Mantis)

This Tool will go through the patch folders created by PatchExtract.PS1 and look for files created older
than 30 days prior to the current date and move these to a sub folder named "OLD" in the patch folders.

## offbyonesec-sync-binja.py
#
# Port to binary ninja of the script written during the Off-by-One Security stream
# (https://youtu.be/FnIQTL9w-Ow) to synchronize GEF with Binary Ninja
# Requires `rpyc` and `pygments`
#
# In IDA, first download and load https://gist.githubusercontent.com/hugsy/714e0038d5d0b1deb7fad1907928252f/raw/87bd608a859c1699f9fc2fb556394d618747bdc8/binja_rpyc_snippet.py
#
# @_hugsy_
#
import rpyc

## binja_rpyc_snippet.py
import binaryninja
import threading
import typing
import logging
import rpyc
import rpyc.utils.helpers
import rpyc.utils.server

if typing.TYPE_CHECKING:
    import rpyc.core.protocol

## README.md

      
              3 files
            
          
              1 fork
            
          
              0 comments
            
          
              6 stars
            
          
                hugsy
                / README.md
            
            
              Last active
              October 4, 2023 21:02
            
              
                A list of command line Rust tool (replacing the Unix legacy ones), showing Windows compat
              
          
Unix tool
Rust version
Windows compatible?
Has prebuild?


cat
bat
✔
   

cd
zoxide
✔
   

cloc
tokei
✔


## rundll_payload_interactive_session.cc
#include <windows.h>
#include <wtsapi32.h>
#include <Userenv.h>
#include <TlHelp32.h>
#include <Lmcons.h>

#include <iostream>

#pragma comment(lib, "Wtsapi32.lib")
#pragma comment(lib, "Userenv.lib")

## MS16-032.cpp
/**
 * Curated exploit of @tirranido leaked handle race condition
 *
 * Tested on
 * - Win7 x64
 * - Win8.1 x64
 * - Win10 x64
 *
 * Ref: https://googleprojectzero.blogspot.com.au/2016/03/exploiting-leaked-thread-handle.html
 * @_hugsy_

## kdnetdebugvm.ps1
#
# Argument initialization
#

$nextarg = "none"
$DebugPort = "unassigned"
$targetcomputer = "."
$VMName = ""
$VMGuid = ""
$AutoAssign = "false"

## docker-compose.yml
version: "3.0"
services:
  es00:
    image: "docker.elastic.co/elasticsearch/elasticsearch-oss:7.10.2"
    ports:
      - "9200:9200"
      - "9300:9300"
    volumes:
      - "es-data-es00:/usr/share/elasticsearch/data"
  es01:
	/**
	*
	* ProcessHollower: Hide a executable inside the runtime of another one
	*
	* Compile with
	* C:> cl.exe ProcessHollower.c
	*
	* Execute with:
	* C:> ProcessHollower.exe notepad.exe myevilbinary.exe
	*
	abandoned
	able
	absolute
	adorable
	adventurous
	academic
	acceptable
	acclaimed
	accomplished
	accurate

	<#
	================
	PATCHCLEAN.PS1
	=================
	Version 1.0 Patch Folder Cleaner by Greg Linares (@Laughing_Mantis)

	This Tool will go through the patch folders created by PatchExtract.PS1 and look for files created older
	than 30 days prior to the current date and move these to a sub folder named "OLD" in the patch folders.
	#
	# Port to binary ninja of the script written during the Off-by-One Security stream
	# (https://youtu.be/FnIQTL9w-Ow) to synchronize GEF with Binary Ninja
	# Requires `rpyc` and `pygments`
	#
	# In IDA, first download and load https://gist.githubusercontent.com/hugsy/714e0038d5d0b1deb7fad1907928252f/raw/87bd608a859c1699f9fc2fb556394d618747bdc8/binja_rpyc_snippet.py
	#
	# @_hugsy_
	#
	import rpyc
	import binaryninja
	import threading
	import typing
	import logging
	import rpyc
	import rpyc.utils.helpers
	import rpyc.utils.server

	if typing.TYPE_CHECKING:
	import rpyc.core.protocol
	#include <windows.h>
	#include <wtsapi32.h>
	#include <Userenv.h>
	#include <TlHelp32.h>
	#include <Lmcons.h>

	#include <iostream>

	#pragma comment(lib, "Wtsapi32.lib")
	#pragma comment(lib, "Userenv.lib")
	/**
	* Curated exploit of @tirranido leaked handle race condition
	*
	* Tested on
	* - Win7 x64
	* - Win8.1 x64
	* - Win10 x64
	*
	* Ref: https://googleprojectzero.blogspot.com.au/2016/03/exploiting-leaked-thread-handle.html
	* @_hugsy_
	#
	# Argument initialization
	#

	$nextarg = "none"
	$DebugPort = "unassigned"
	$targetcomputer = "."
	$VMName = ""
	$VMGuid = ""
	$AutoAssign = "false"
	version: "3.0"
	services:
	es00:
	image: "docker.elastic.co/elasticsearch/elasticsearch-oss:7.10.2"
	ports:
	- "9200:9200"
	- "9300:9300"
	volumes:
	- "es-data-es00:/usr/share/elasticsearch/data"
	es01: