Skip to content

Instantly share code, notes, and snippets.

View joeminicucci's full-sized avatar

m1n1 joeminicucci

43 followers · 58 following
View GitHub Profile
@joeminicucci
joeminicucci / private_fork.md
Created January 12, 2021 23:37 — forked from 0xjac/private_fork.md
Create a private fork of a public repository

The repository for the assignment is public and Github does not allow the creation of private forks for public repositories.

The correct way of creating a private frok by duplicating the repo is documented here.

For this assignment the commands are:

  1. Create a bare clone of the repository. (This is temporary and will be removed so just do it wherever.) 
    

    2. 



git clone --bare git@github.com:usi-systems/easytrace.git



  


  




    


          
    

      

        
        

          

              @joeminicucci
          

          

            
                joeminicucci
                / PowerView-3.0-tricks.ps1
            
            

              Created
              June 1, 2020 05:58
                — forked from HarmJ0y/PowerView-3.0-tricks.ps1
            

              
                PowerView-3.0 tips and tricks
              
          

        

      

        

  

    
    


        



  


  

        

          
          # PowerView's last major overhaul is detailed here: http://www.harmj0y.net/blog/powershell/make-powerview-great-again/
        

        

          
          #   tricks for the 'old' PowerView are at https://gist.github.com/HarmJ0y/3328d954607d71362e3c
        

        

          
          

        

        

          
          # the most up-to-date version of PowerView will always be in the dev branch of PowerSploit:
        

        

          
          #   https://github.com/PowerShellMafia/PowerSploit/blob/dev/Recon/PowerView.ps1
        

        

          
          

        

        

          
          # New function naming schema:
        

        

          
          #   Verbs:
        

        

          
          #       Get : retrieve full raw data sets
        

        

          
          #       Find : ‘find’ specific data entries in a data set
        

  





    


  




    


          
    

      

        
        

          

              @joeminicucci
          

          

            
                joeminicucci
                / Invoke-DCSync.ps1
            
            

              Created
              January 23, 2020 02:30
                — forked from monoxgas/Invoke-DCSync.ps1
            

              
                What more could you want?
              
          

        

      

        

  

        

      This file has been truncated, but you can view the full file.
    


    


        



  


  

        

          
          function Invoke-DCSync
        

        

          
          {
        

        

          
          <#
        

        

          
          .SYNOPSIS
        

        

          
          

        

        

          
          Uses dcsync from mimikatz to collect NTLM hashes from the domain.
        

        

          
          

        

        

          
          Author: @monoxgas
        

        

          
          Improved by: @harmj0y
        

  





    


  




    


          
    

      

        
        

          

              @joeminicucci
          

          

            
                joeminicucci
                / simple-https-server.py
            
            

              Created
              September 16, 2019 18:29
                — forked from dergachev/simple-https-server.py
            

          

        

      

        

  

    
    


        



  


  

        

          
          # taken from http://www.piware.de/2011/01/creating-an-https-server-in-python/
        

        

          
          # generate server.xml with the following command:
        

        

          
          #    openssl req -new -x509 -keyout server.pem -out server.pem -days 365 -nodes
        

        

          
          # run as follows:
        

        

          
          #    python simple-https-server.py
        

        

          
          # then in your browser, visit:
        

        

          
          #    https://localhost:4443
        

        

          
          

        

        

          
          import BaseHTTPServer, SimpleHTTPServer
        

        

          
          import ssl
        

  





    


  




    


          
    

      

        
        

          

              @joeminicucci
          

          

            
                joeminicucci
                / Various-Macro-Based-RCEs.md
            
            

              Created
              September 8, 2019 04:21
                — forked from mgeeky/Various-Macro-Based-RCEs.md
            

              
                Various Visual Basic Macros-based Remote Code Execution techniques to get your meterpreter invoked on the infected machine.
              
          

        

      

        

  

      

    
This is a note for myself describing various Visual Basic macros construction strategies that could be used for remote code execution via malicious Document vector.
Nothing new or fancy here, just a list of techniques, tools and scripts collected in one place for a quick glimpse of an eye before setting a payload.


All of the below examples had been generated for using as a remote address: 192.168.56.101.


List:


    

  1. Page substiution macro for luring user to click Enable Content
    2. 

  2. The Unicorn Powershell based payload
    3.