swtornio

syntax on
filetype indent on
set number
set shiftwidth=4
set expandtab
set nowrap

swtornio

#!/usr/bin/env python2

import SimpleHTTPServer
import SocketServer
import logging

PORT = 8000

class GetHandler(SimpleHTTPServer.SimpleHTTPRequestHandler):

swtornio

Baracuda - http://www.barracudacentral.org/report/website-category/www.example.org

Bluecoat - https://sitereview.bluecoat.com/sitereview.jsp

Bright Cloud - https://www.brightcloud.com/tools/url-ip-lookup.php

CheckPoint- https://www.checkpoint.com/urlcat/

Cisco - Scansafe -  https://securityhub.cisco.com/web/submited_urls

swtornio

                _   _            _      ____             _    _ 
               | | | | __ _  ___| | __ | __ )  __ _  ___| | _| |
               | |_| |/ _` |/ __| |/ / |  _ \ / _` |/ __| |/ / |
               |  _  | (_| | (__|   <  | |_) | (_| | (__|   <|_|
               |_| |_|\__,_|\___|_|\_\ |____/ \__,_|\___|_|\_(_)
                                                 
                                  A DIY Guide

swtornio

MS-MSDT 0-day Office RCE

MS Office docx files may contain external OLE Object references as HTML files. There is an HTML sceme "ms-msdt:" which invokes the msdt diagnostic tool, what is capable of executing arbitrary code (specified in parameters).

The result is a terrifying attack vector for getting RCE through opening malicious docx files (without using macros).

Here are the steps to build a Proof-of-Concept docx:

1. Open Word (used up-to-date 2019 Pro, 16.0.10386.20017), create a dummy document, insert an (OLE) object (as a Bitmap Image), save it in docx.

swtornio

#!/usr/bin/env python3


import argparse
import sys
import json

import logging

swtornio

#!/usr/bin/env python3
#
# inputs: nmap.xml (nmap scan xml output), subdomains.csv (optional virtualhost info, hostname + ip address csv file)
# output: url listing (useful for tools like EyeWitness)
#
# sample usage: ./nmap-http-url.py nmap.xml subdomains.csv | sort -u | gowitness file -f -
#

description = '''
Generate HTTP URLs from Nmap XML (and optionally additional VirtualHost listing, taken from e.g. subdomain enumeration).

swtornio

PS C:\WINDOWS\system32> Get-AppxPackage -allusers XboxApp | Remove-AppxPackage
PS C:\WINDOWS\system32> Get-AppxPackage -allusers Microsoft.XboxGamingOverlay | Remove-AppxPackage
PS C:\WINDOWS\system32> Get-AppxPackage -allusers XboxApp | Remove-AppxPackage

swtornio

Uninstall a python app that used setup.py

> python setup.py install --record files.txt
> cat files.txt | xargs rm -rf

swtornio

#############################################
## DEFAULT GENERAL SETTINGS (tmux show -g) ##
#############################################

set-option -g activity-action other
set-option -g assume-paste-time 1
set-option -g base-index 0
set-option -g bell-action any
set-option -g default-command ""
set-option -g default-shell "/bin/bash"