Manas Bellani manasmbellani

## subdomaincheck.py
#!/usr/bin/python

from argparse import ArgumentParser, RawTextHelpFormatter
import subprocess
import shlex
import requests


USER_AGENT_STR = "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:49.0) Gecko/20100101 Firefox/49.0"

## recon_info_grepassets.py
#!/usr/bin/python3

import os
import re
import subprocess
import shlex
import requests
from argparse import ArgumentParser, RawTextHelpFormatter

DEFINITION = ("Greps the assets, IPs, and emails from a given input file, and "

## recon_info_crtsh.py
#!/usr/bin/python3

import subprocess
import shlex
import requests
from bs4 import BeautifulSoup
from sys import exit
from argparse import ArgumentParser, RawTextHelpFormatter

### URL to crt.sh to get all the domains

## recon_info_netcraft.py
#!/usr/bin/python3

import subprocess
import shlex
import requests
from bs4 import BeautifulSoup
from sys import exit
from argparse import ArgumentParser, RawTextHelpFormatter


## modified-sudo-backdoor.sh
#!/bin/bash
# Script created for testing and learning purposes only. The author does not take any responsibility for the actions taken
# when using this script.
# Note that it is generally not a good idea to be storing plain text credentials to disk where other users will be able to
# access them.


# Drop this file on disk in the leading directory on $PATH and make it executable
# Then update the CREDS_FILE to the location that the creds must be written

## zzz_exploit_2.py
#!/usr/bin/python
from impacket import smb, smbconnection
from mysmb import MYSMB
from struct import pack, unpack, unpack_from
import sys
import socket
import time

'''
MS17-010 exploit for Windows 2000 and later by sleepya

## mimikatz.xsl
<xsl:stylesheet xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:ms="urn:schemas-microsoft-com:xslt" xmlns:vb="urn:the-xml-files:xslt-vb" xmlns:user="placeholder" version="1.0">
<!-- Copyright (c) Microsoft Corporation.  All rights reserved. -->

<xsl:output method="text" omit-xml-declaration="yes" indent="no"/>
<xsl:strip-space elements="*" />

<ms:script implements-prefix="user" language="JScript">
<![CDATA[


## Get-EmployeesWithId.ps1
# Gets a list of employees with Active EmployeeID
# As at 24/07/2018, Information on Get-ADUser powershell cmdlet available at https://docs.microsoft.com/en-us/powershell/module/activedirectory/get-aduser?view=winserver2012-ps
Get-ADUser -LDAPFilter "(&(EmployeeID=*))" -Properties EmployeeID,EmployeeNumber,Displayname,department, userAccountControl,title | Export-Csv -Path C:\Windows\Temp\out.csv

## check_live_assets_via_ping.sh
#!/bin/bash
if [ $# -lt 2 ]; then
    echo "[-] $0 <assets-list> <out-active-assets-list>"
    exit
fi
assets_list="$1"
out_active_assets_list="$2"

for asset in `cat "$assets_list"`; do
    echo "[*] Testing asset '$asset'"

## get_dorks_for_sensitive_dirs.sh
#!/bin/bash
./get_latest_dorks_from_ghdb.sh 3
	#!/usr/bin/python

	from argparse import ArgumentParser, RawTextHelpFormatter
	import subprocess
	import shlex
	import requests


	USER_AGENT_STR = "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:49.0) Gecko/20100101 Firefox/49.0"
	#!/usr/bin/python3

	import os
	import re
	import subprocess
	import shlex
	import requests
	from argparse import ArgumentParser, RawTextHelpFormatter

	DEFINITION = ("Greps the assets, IPs, and emails from a given input file, and "
	#!/bin/bash
	# Script created for testing and learning purposes only. The author does not take any responsibility for the actions taken
	# when using this script.
	# Note that it is generally not a good idea to be storing plain text credentials to disk where other users will be able to
	# access them.


	# Drop this file on disk in the leading directory on $PATH and make it executable
	# Then update the CREDS_FILE to the location that the creds must be written
	#!/usr/bin/python
	from impacket import smb, smbconnection
	from mysmb import MYSMB
	from struct import pack, unpack, unpack_from
	import sys
	import socket
	import time

	'''
	MS17-010 exploit for Windows 2000 and later by sleepya
	<xsl:stylesheet xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:ms="urn:schemas-microsoft-com:xslt" xmlns:vb="urn:the-xml-files:xslt-vb" xmlns:user="placeholder" version="1.0">
	<!-- Copyright (c) Microsoft Corporation. All rights reserved. -->

	<xsl:output method="text" omit-xml-declaration="yes" indent="no"/>
	<xsl:strip-space elements="*" />

	<ms:script implements-prefix="user" language="JScript">
	<![CDATA[
	# Gets a list of employees with Active EmployeeID
	# As at 24/07/2018, Information on Get-ADUser powershell cmdlet available at https://docs.microsoft.com/en-us/powershell/module/activedirectory/get-aduser?view=winserver2012-ps
	Get-ADUser -LDAPFilter "(&(EmployeeID=*))" -Properties EmployeeID,EmployeeNumber,Displayname,department, userAccountControl,title \| Export-Csv -Path C:\Windows\Temp\out.csv
	#!/bin/bash
	if [ $# -lt 2 ]; then
	echo "[-] $0 <assets-list> <out-active-assets-list>"
	exit
	fi
	assets_list="$1"
	out_active_assets_list="$2"

	for asset in `cat "$assets_list"`; do
	echo "[*] Testing asset '$asset'"