jermdw

version: '2'
services:
  mongodb:
    image: mongo:3
    volumes:
      - mongo_data:/data/db
  elasticsearch:
    image: docker.elastic.co/elasticsearch/elasticsearch:5.6.9
    volumes:
      - es_data:/usr/share/elasticsearch/data

jermdw

# Sigma profile

Import-Module W:\Gits\posh-git\posh-git.psm1

set-executionpolicy Unrestricted process
$baseDir = Split-Path -parent $MyInvocation.MyCommand.Definition
. "$baseDir\hand.ps1"

# General actions
function edit ($file) { & "${env:ProgramFiles(x86)}\Notepad++\notepad++.exe" $file }

jermdw

Prompt is green for standard user and turns red when elevated to root

PS1='${debian_chroot:+($debian_chroot)}\[\033[01;31m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '

PS1='${debian_chroot:+($debian_chroot)}\[\033[01;32m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '

Reference

jermdw

Byobu is a suite of enhancements to tmux, as a command line
tool providing live system status, dynamic window management,
and some convenient keybindings:

  F1                             * Used by X11 *
    Shift-F1                     Display this help
  F2                             Create a new window
    Shift-F2                     Create a horizontal split
    Ctrl-F2                      Create a vertical split
    Ctrl-Shift-F2                Create a new session

jermdw

network:
  version: 2
  renderer: networkd
  ethernets:
    ens160:
      addresses:
        - 192.168.1.93/24
      gateway4: 192.168.1.1

jermdw

#!/usr/bin/env python3
 
"""Simple HTTP Server With Upload.

This module builds on BaseHTTPServer by implementing the standard GET
and HEAD requests in a fairly straightforward manner.

see: https://gist.github.com/UniIsland/3346170
"""
 

jermdw

(gwmi Win32_UserProfile | ? { $_.SID -notmatch "S-1-5-(18|19|20).*" }).LocalPath | % { ls -Path $_ -Recurse -Filter "*.exe" } | % { Get-AuthenticodeSignature -FilePath $_.FullName } | ? { $_.Status -ne 'Valid' }

jermdw

#Grabs the path you wish to search 
$getPath = Read-Host "What is the path you would like to search (example: c:\temp)"

#recursively searches through a path and grabs the data streams 
$getItem = Get-ChildItem -Path $getPath -Recurse | Get-Item -Stream * 


foreach($item in $getItem) {

jermdw

Lateral Movement Top 7

1. Service Control Manager

   • This method is used by psexec and all of its clones to start the executable that psexec creates.

2. Task scheduler (scheduled task)

   • A command to be run at designated time(s) as SYSTEM.

jermdw

# Create Windows Server 2016 Domain Controller
# with a little help from: https://j3rm.io/2EKvjXY

# rename computer
Rename-computer -newname 2016-DC01

# setup ip configuration
$ipaddress = "10.0.0.2"
$dnsaddress = "127.0.0.1"
New-NetIPAddress -InterfaceAlias Ethernet -IPAddress $ipaddress -AddressFamily IPv4 -PrefixLength 24