samsayen

.
..
........
@
*
*.*
*.*.*
🐎

samsayen

`
~/
~
ים
   
 
___
__
_
---

samsayen

//Exploit Code by Shawar Khan

var data_chunks = '';
// Capturing Records from API
fetch('https://redacted.com/api/v3/records/all').then((resp) => resp.text()).then(function(data) {
    
    // Holds the records in as String
    var allrecords = data; 
    
    // converting response to JSON

samsayen

tmux shortcuts & cheatsheet

start new:

tmux

start new with session name:

tmux new -s myname

samsayen

Host Enumeration:

--- OS Specifics ---
wmic os LIST Full (* To obtain the OS Name, use the "caption" property)

wmic computersystem LIST full

--- Anti-Virus ---

wmic /namespace:\\root\securitycenter2 path antivirusproduct

samsayen

#!/bin/sh
# 2016
echo "Loading Firewall ..."

#################### 
# Disable IPv6     # 
#################### 

adb shell "echo 1 > /proc/sys/net/ipv6/conf/all/disable_ipv6"
adb shell "echo 1 > /proc/sys/net/ipv6/conf/default/disable_ipv6"

samsayen

Install AWS CLI

sudo apt-get install -y python-dev python-pip
sudo pip install awscli
aws --version
aws configure

Cloudtrail - Logging and Auditing

http://docs.aws.amazon.com/cli/latest/reference/cloudtrail/

samsayen

Kerberos cheatsheet

Clean up

Clean up shitty formatting
cat powerview-kerbroast.txt | sed 's/[[:space:]]//g'

Bruteforcing

With kerbrute.py:

samsayen

.
..
........
@
*
*.*
*.*.*
🐎

samsayen

#!/usr/bin/perl -w

use warnings; use strict;

# modified by dek on 2014-05-08

## Settings
our $daemon   = 1; #run as a daemon or not (0/1)
our $logging  = 1; #logging on or off (0/1)
our $logfile  = 'proxydaemon.log';