Skip to content

Instantly share code, notes, and snippets.

@kerard
kerard / filter-wireshark.pcapng
Created August 17, 2020 16:57
Wireshark filter to exclude externally sourced traffic
ip.dst == DST_IP_HERE && (ip.src == 10.0.0.0/8 || ip.src == 172.16.0.0/12 || ip.src == 192.168.0.0/16)
@kerard
kerard / filter-wireshark.pcapng
Created August 17, 2020 16:57
Wireshark filter to exclude externally sourced traffic
ip.dst == DST_IP_HERE && (ip.src == 10.0.0.0/8 || ip.src == 172.16.0.0/12 || ip.src == 192.168.0.0/16)
@kerard
kerard / psping-86400s.cmd
Created August 17, 2020 14:11
PSPING 86400 stat day run (ICMP)
psping64.exe -h 50 -i 1 -n 86400 -4 TARGET_HOST.DOMAIN.COM > psping-stats-icmp.txt
@kerard
kerard / reset-dsclcm.ps1
Created July 31, 2020 17:49
Reset DSC LCM
[CmdletBinding()]
Param(
[Parameter()]
[string[]]
$ComputerName = @('localhost')
)
[DscLocalConfigurationManager()]
Configuration ResetLCM {
Param (
@kerard
kerard / make-pcap.cmd
Created July 30, 2020 20:28
Start and stop a packet capture with NetShell (Windows)
netsh trace start tracefile=c:\smb-%computername%.etl capture=yes scenario=netconnection,Filesharing maxsize=1024
REM run this command below to stop the background trace
REM netsh trace stop
@kerard
kerard / install-powercli.ps1
Created July 27, 2020 17:56
Install VMware PowerCLI
Install-Module -Name VMware.PowerCLI
@kerard
kerard / force-tls12.ps1
Created July 27, 2020 13:20
Force Powershell to use TLS 1.2
[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
@kerard
kerard / repair-cert.
Created July 20, 2020 18:53
Join a new certificate to old private key (Windows)
certutil -repairstore my $serialNumber
@kerard
kerard / filter-wireshark
Created July 20, 2020 13:08
Filter Wireshark PCAP by datetime
(frame.time >= "Jul 16, 2020 04:00:00" && frame.time <= "Jul 16, 2020 04:02:00")
@kerard
kerard / list-services.ps1
Created July 17, 2020 02:01
List Remote Services
foreach ($computer in (get-adcomputer -filter {(Name -like "*name*" -and OperatingSystem -like "*Server*")}))
{
$computer.Name
$servicesObj = Get-WmiObject -Class "Win32_Service" -computer $computer.name | ? {$_.name -like "*service*"} | % {($computer.Name,$_.name,$_.pathname) -join ","}
$servicesObj | out-file -Append .\services.csv
}