kbandla

Installing Win11 without TPM

• press Shift+F10 to get cmd, and start regedit
• HKEY_LOCAL_MACHINE\SYSTEM\Setup
  • Create LabConfig key
  • HKEY_LOCAL_MACHINE\SYSTEM\Setup\LabConfig
  • Add following DWORD32 keys with a value of 1:
    • BypassTPMCheck
    • BypassRAMCheck
• BypassSecureBootCheck

kbandla

:: https://superuser.com/questions/171917/force-a-program-to-run-without-administrator-privileges-or-uac
:: @kbandla
@echo off
IF "%1%"=="" (
    echo [!] Error: Need full path to the program. Aborting.
) else (
    echo [*] Copied AppData path to clipboard
    echo %LOCALAPPDATA% | clip
    cmd /min /C "set __COMPAT_LAYER=RUNASINVOKER && start "" %1"
)

kbandla

! 2022-11-15 https://www.youtube.com
www.youtube.com###contentContainer
www.youtube.com###primary > .ytd-two-column-browse-results-renderer.style-scope
www.youtube.com###secondary

! 2023-01-28 nytimes.com
www.nytimes.com###gateway-content
www.nytimes.com###app>div>div[class^="css-"]>div[aria-hidden="true"]+div[class^="css-"]
www.nytimes.com###app>div>div[class^="css-"]:style(position:static!important)

kbandla

msiexec /a %1 /qb TARGETDIR=%2

kbandla

Was curious why VLC took so long to startup. Launched it in windbg, to find it load about 400 DLLs.

0:014> lm
start             end                 module name
00007ff7`977b0000 00007ff7`978a8000   vlc        (export symbols)       C:\Users\kbandla\vlc\3.0.16-win64\vlc.exe
00007ffe`203c0000 00007ffe`203d9000   libvisual_plugin   (deferred)             
00007ffe`203e0000 00007ffe`205b4000   libprojectm_plugin   (deferred)             
00007ffe`205c0000 00007ffe`2060f000   libgoom_plugin   (deferred)             
00007ffe`20610000 00007ffe`20625000 libglspectrum_plugin (deferred) 

kbandla

(venv) kbandla@ashburn:/tmp$ binwalk MksWifi.bin

DECIMAL       HEXADECIMAL     DESCRIPTION
--------------------------------------------------------------------------------
29640         0x73C8          LZMA compressed data, properties: 0xC0, dictionary size: -1929314304 bytes, uncompressed size: 850403574015 bytes
94901         0x172B5         LZMA compressed data, properties: 0xC0, dictionary size: 44892160 bytes, uncompressed size: 9097839549 bytes
276851        0x43973         LZMA compressed data, properties: 0xC0, dictionary size: 553779200 bytes, uncompressed size: 550036902400 bytes
295640        0x482D8         HTML document footer
296676        0x486E4         HTML document header
298088        0x48C68         LZMA compressed data, properties: 0x64, dictionary size: 0 bytes, uncompressed size: 167772160 bytes

kbandla

package
{
   import flash.display.Loader;
   import flash.display.Sprite;
   import flash.events.Event;
   import flash.events.IOErrorEvent;
   import flash.events.SecurityErrorEvent;
   import flash.net.URLLoader;
   import flash.net.URLRequest;
   import flash.system.Capabilities;

kbandla

;
; Windows x64 kernel shellcode from ring 0 to ring 3 by sleepya
; The shellcode is written for eternalblue exploit:
; - https://gist.github.com/worawit/bd04bad3cd231474763b873df081c09a
; - https://gist.github.com/worawit/074a27e90a3686506fc586249934a30e
;
;
; Idea for Ring 3 to Ring 0 from Sean Dillon (@zerosum0x0)
;
;

kbandla

import dpkt
from dpkt.ip import IP
from dpkt.ethernet import Ethernet
from dpkt.arp import ARP
from pprint import pprint
import socket
import sys
import csv
from Tkinter import *
import tkMessageBox

kbandla

'''
dpkt issue 254
'''
import dpkt
from dpkt.ip import IP
from dpkt.ethernet import Ethernet
from dpkt.arp import ARP
from pprint import pprint
import socket