Skip to content

Instantly share code, notes, and snippets.

View parsiya's full-sized avatar

Parsia Hakimian parsiya

View GitHub Profile
@parsiya
parsiya / adventures-jsonschema-to-go.md
Last active November 1, 2022 08:16
Adventures in Converting Semgrep Output JSON Schema to Go Structs

title: "SANS Holiday Hack Challenge 2018 Solutions" date: 2019-01-15T19:33:21-05:00 draft: false toc: true comments: true twitterImage: 01-bloodhound.png categories:

  • Writeup
  • Crypto
@parsiya
parsiya / no-arguments-rce.cs
Last active March 22, 2021 01:25
Pass the input as the first argument. You can pass schemes (`ms-calculator://whatever`) or files (`C:/windows/system32/calc.exe).
using System;
using System.Diagnostics;
using System.Runtime.InteropServices;
namespace runme
{
class Program
{
static void Main(string[] args)
{
@parsiya
parsiya / install.md
Last active April 3, 2021 07:32
What to install in a new Windows VM
  • Win 10 debloater
  • Choco
    • notepad++ + shortcut
    • dnspy + shortcut
    • hxd + shortcut
    • 7zip + remove extra context menu items like hashes
  • Sysinternals
    • Shortcut to procmon on desktop
  • Burp
  • Extensions
@parsiya
parsiya / burp-summary-report.xsl
Created November 4, 2019 23:49 — forked from pajswigger/burp-summary-report.xsl
XSLT file to generate a summary HTML report from a Burp XML report
<?xml version="1.0" encoding="UTF-8"?>
<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform">
<xsl:output method="html" indent="no"/>
<xsl:key name="issue-by-type" match="issue" use="type" />
<xsl:template match="/issues">
<html>
<head>
<title>Burp Scanner Report</title>
@parsiya
parsiya / 1 - pythons_sinister_secrets.md
Created December 30, 2018 06:05 — forked from MarkBaggett/1 - pythons_sinister_secrets.md
Come To The Darkside - Pythons Sinister Secrets

This is a collection of code snippets used in my Pen Test Hackfest 2018 Presentation

# notepad does not have an entry
$ Test-Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\notepad.exe"
False
# chrome does
$ Test-Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\chrome.exe"
True
from base64 import b64encode
from binascii import unhexlify
print b64encode(unhexlify("0a0b0c0d"))
CgsMDQ==

There are definitely better ways to do this. The named parameter version is much better in my opinion, the shortcode is easier to write but this should work for both.

Create a file named wp.html (this will be the name of the shortcode) and put it in hugo\layouts\shortcodes\.

{{ if .IsNamedParams }}
  {{ $.Scratch.Set "wp_tag" (.Get "tag") }}
  {{ with .Get "lang" }}
    {{ $.Scratch.Set "wp_lang" . }}
  {{ else }}