mpgn

## wifi-relay.sh
#!/bin/bash
# Wifi easy PEAP relay
#
# Author: 1mm0rt41PC - immortal-pc.info - https://github.com/1mm0rt41PC
#
# Ref:
# 	- https://github.com/sensepost/hostapd-mana
# 	- https://github.com/sensepost/wpa_sycophant
# 	- https://sensepost.com/blog/2019/peap-relay-attacks-with-wpa_sycophant/
# 	- https://www.youtube.com/watch?v=eYsGyvGxlpI&feature=youtu.be&t=1052

## PowerView-3.0-tricks.ps1
# PowerView's last major overhaul is detailed here: http://www.harmj0y.net/blog/powershell/make-powerview-great-again/
#   tricks for the 'old' PowerView are at https://gist.github.com/HarmJ0y/3328d954607d71362e3c

# the most up-to-date version of PowerView will always be in the dev branch of PowerSploit:
#   https://github.com/PowerShellMafia/PowerSploit/blob/dev/Recon/PowerView.ps1

# New function naming schema:
#   Verbs:
#       Get : retrieve full raw data sets
#       Find : ‘find’ specific data entries in a data set

## README.md

      
              2 files
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                mpgn
                / README.md
            
            
              Created
              November 26, 2019 15:12
            
              
                CrackMapExec module to set as "owned" on BloodHound every target owned by the attacker
              
          
    Installation


Copy bloodhound_owned.py in cme/modules and reinstall CrackMapExec python setup.py install
pip install neo4j

Usage

cme smb 10.10.0.0/24 -d adsec.local -u jsnow -p Winter_is_coming_\! -M bloodhound_owned

  
## railspwn.rb
require 'yaml'
require 'base64'
require 'erb'

class ActiveSupport
  class Deprecation
    def initialize()
      @silenced = true
    end
    class DeprecatedInstanceVariableProxy

## DigitalSignature-Hijack.ps1
<#
    DigitalSignatureHijack v1.0
    License: GPLv3
    Author: @netbiosX
#>
# Validate Digital Signature for PowerShell Scripts

function ValidateSignaturePS
{
	$ValidateHashFunc = 'HKLM:\SOFTWARE\Microsoft\Cryptography' +'\OID\EncodingType 0\CryptSIPDllVerifyIndirectData'

## ftpserver.py
#!/usr/bin/env python2
# coding: utf-8

import os,socket,threading,time
#import traceback

allow_delete = False
local_ip = socket.gethostbyname(socket.gethostname())
local_port = 8888
currdir=os.path.abspath('.')
	#!/bin/bash
	# Wifi easy PEAP relay
	#
	# Author: 1mm0rt41PC - immortal-pc.info - https://github.com/1mm0rt41PC
	#
	# Ref:
	# - https://github.com/sensepost/hostapd-mana
	# - https://github.com/sensepost/wpa_sycophant
	# - https://sensepost.com/blog/2019/peap-relay-attacks-with-wpa_sycophant/
	# - https://www.youtube.com/watch?v=eYsGyvGxlpI&feature=youtu.be&t=1052
	# PowerView's last major overhaul is detailed here: http://www.harmj0y.net/blog/powershell/make-powerview-great-again/
	# tricks for the 'old' PowerView are at https://gist.github.com/HarmJ0y/3328d954607d71362e3c

	# the most up-to-date version of PowerView will always be in the dev branch of PowerSploit:
	# https://github.com/PowerShellMafia/PowerSploit/blob/dev/Recon/PowerView.ps1

	# New function naming schema:
	# Verbs:
	# Get : retrieve full raw data sets
	# Find : ‘find’ specific data entries in a data set
	require 'yaml'
	require 'base64'
	require 'erb'

	class ActiveSupport
	class Deprecation
	def initialize()
	@silenced = true
	end
	class DeprecatedInstanceVariableProxy
	<#
	DigitalSignatureHijack v1.0
	License: GPLv3
	Author: @netbiosX
	#>
	# Validate Digital Signature for PowerShell Scripts

	function ValidateSignaturePS
	{
	$ValidateHashFunc = 'HKLM:\SOFTWARE\Microsoft\Cryptography' +'\OID\EncodingType 0\CryptSIPDllVerifyIndirectData'
	#!/usr/bin/env python2
	# coding: utf-8

	import os,socket,threading,time
	#import traceback

	allow_delete = False
	local_ip = socket.gethostbyname(socket.gethostname())
	local_port = 8888
	currdir=os.path.abspath('.')