Skip to content

Instantly share code, notes, and snippets.

View micahvandeusen's full-sized avatar

Micah Van Deusen micahvandeusen

View GitHub Profile
@micahvandeusen
micahvandeusen / PetitPotam.py
Created August 11, 2021 14:41
PetitPotam.py modified to use EfsRpcDecryptFileSrv not EfsRpcOpenFileRaw
#!/usr/bin/env python
#
# Author: GILLES Lionel aka topotam (@topotam77)
# Modified by: Micah Van Deusen (@micahvandeusen)
# Greetz : grenadine(@Greynardine), skar(@__skar), didakt(@inf0sec1), plissken, pixis(@HackAndDo), shutd0wn(@ _nwodtuhs)
# "Most of" the code stolen from dementor.py from @3xocyte ;)
import sys
import argparse
#!/usr/bin/env python3
import requests, sys, re, argparse
parser = argparse.ArgumentParser()
parser.add_argument('domain', help='Domain to query.')
parser.add_argument('type', choices=['subdomain', 'ip'], help='Return IPs or subdomains.')
args = parser.parse_args()
data = requests.get('https://dns.bufferover.run/dns?q=.'+args.domain).json()
fdns = data['FDNS_A']
#include <Windows.h>
#include <Ntsecapi.h>
#include <sddl.h>
#include <stdio.h>
#include <tchar.h>
#include <Lm.h>
#include <assert.h>
#include <TlHelp32.h>
#include <string>

Keybase proof

I hereby claim:

  • I am micahvandeusen on github.
  • I am mvandeusen (https://keybase.io/mvandeusen) on keybase.
  • I have a public key ASBVmt4Zmho-7vkGEy8SiJlFpL9cUIhtPh83Z4TXlZ0umwo

To claim this, I am signing this object: