Skip to content

Instantly share code, notes, and snippets.

@jbeley
jbeley / 0_CyberChef_CobaltStrike_Shellcode_Decoder_Recipe
Created May 5, 2020 00:12 — forked from 0xtornado/0_CyberChef_CobaltStrike_Shellcode_Decoder_Recipe
CyberChef recipe to extract and decode Shellcode from a Cobalt Strike beacon
[{"op":"Conditional Jump","args":["bxor",false,"Decode_Shellcode",10]},{"op":"Label","args":["Decode_beacon"]},{"op":"From Base64","args":["A-Za-z0-9+/=",true]},{"op":"Decode text","args":["UTF-16LE (1200)"]},{"op":"Regular expression","args":["User defined","[a-zA-Z0-9+/=]{30,}",true,true,false,false,false,false,"List matches"]},{"op":"From Base64","args":["A-Za-z0-9+/=",true]},{"op":"Gunzip","args":[]},{"op":"Label","args":["Decode_Shellcode"]},{"op":"Regular expression","args":["User defined","[a-zA-Z0-9+/=]{30,}",true,true,false,false,false,false,"List matches"]},{"op":"Conditional Jump","args":["",false,"",10]},{"op":"From Base64","args":["A-Za-z0-9+/=",true]},{"op":"XOR","args":[{"option":"Decimal","string":"35"},"Standard",false]}]
143 function Invoke-Mimidogz
140 function Invoke-Mimikatz
29 function Invoke-Mimi
10 function Chokorun
7 function Invoke-Ttest
7 function Invoke-Mimiwormz
7 function Invoke-Me
6 function Invoke-Mimiturtle
6 function Invoke-Mimimi
5 function output

Keybase proof

I hereby claim:

  • I am jbeley on github.
  • I am jbeley (https://keybase.io/jbeley) on keybase.
  • I have a public key ASCkc7YKvUUxYHpSZazTMsD4YK6O9M8lhYWslaqyyCNm5Ao

To claim this, I am signing this object:

@jbeley
jbeley / calibre.service
Created June 11, 2018 11:29
Avahi service file for calibre e-book server
<?xml version="1.0" standalone='no'?><!--*-nxml-*-->
<!DOCTYPE service-group SYSTEM "avahi-service.dtd">
<!-- See avahi.service(5) for more information about this configuration file -->
<!-- See https://code.google.com/archive/p/openpub/wikis/DeprecatedOPDSSpecification.wiki for OPDS spec -->
<service-group>
<name>Calibre</name>
<service>
<type>_opds._tcp</type>
<port>8080</port>
<host-name>myhostname.local</host-name>
@jbeley
jbeley / docker_image_export.sh
Created September 1, 2015 11:59
export all docker images for import to new machine
for i in $(docker images -q);
do
docker save -o $i.tar $i ;
done