Max Harley t94j0

## rpc_discovery.ps1
Set-GlobalSymbolResolver -DbgHelpPath 'C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\dbghelp.dll'

function Process-RpcProcedure {
    param (
        [string]$Path
    )

    $dllHash = (Get-FileHash -Path $Path).Hash
    $rpcs = Get-RpcServer -Path $Path

## smb-webclientenum.nse
local smb = require "smb"
local stdnse = require "stdnse"
local string = require "string"

description = [[
    Port of @zyn3rgy's webclientenum
]]

-- nmap --script=smb-webclientenum.nse --script-args=smbuser=<username>,smbpass=<password>,smbbasic=1,smbsign=force <host>

## ss14_macOS_instruments.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                t94j0
                / ss14_macOS_instruments.md
            
            
              Created
              November 6, 2021 20:32
            
              
                Because listening to audio shitposts is fun
              
          
    Using Instruments in Space Station 14 on macOS

SS14 uses [FluidSynth] as a backend for playing MIDI files. The FluidSynth dylib is not included as a resource in the game, so we must add it ourselves. Luckily, [HomeBrew] has formula for this.
Installation


Install fluid-synth

brew install fluid-synth

  
## .htaccess
	#
	# TO-DO: set |DESTINATIONURL| below to be whatever you want e.g. www.google.com. Do not include "http(s)://" as a prefix. All matching requests will be sent to that url. Thanks @Meatballs__!
	#
	# Note this version requires Apache 2.4+
	#
	# Save this file into something like /etc/apache2/redirect.rules.
	# Then in your site's apache conf file (in /etc/apache2/sites-avaiable/), put this statement somewhere near the bottom
	#
	# Include /etc/apache2/redirect.rules
	#

## monitor.py
from pypsrp.exceptions import AuthenticationError
from pypsrp.client import Client

HOST = '10.0.128.100'
MY_PASSWORD = 'abc123!!!'
client = None


def connect(username: str, password: str):
    global client

## shadow.hs
import System.IO
import Data.Dates
import Data.List.Split

data ShadowEntry = ShadowEntry {
  username :: String,
  hash :: String
} deriving (Show)

parseShadowEntryString :: String -> ShadowEntry

## test


<?XML version="1.0"?>
print("Hello World!");
]]>
</scriptlet>

## Brewfile
tap "osx-cross/avr"
tap "sidaf/pentest"
tap "t94j0/security"
tap "homebrew/core"
tap "homebrew/bundle"
tap "homebrew/services"
tap "acrogenesis/macchanger"
tap "caskroom/cask"
cask "java"
brew "afl-fuzz"

## Get-NonDefaultServices.ps1
$defaultServices = @("AppInfo", "AudioEndpointBuilder", "Audiosrv", "BFE", "BITS", "BrokerInfrastructure", "CertPropSvc", "CoreMessagingRegistrar", "CryptSvc", "DeviceAssociationService", "Dhcp", "DiagTrack", "Dnscache", "SecurityHealthServMpsSvc", "DoSvc", "DPS", "TimeBrokerSvc", "ProfSvc", "Winmgmt", "EventLog", "LicenseManager", "EventSystem", "wuauserv", "WpnService", "Wcmsvc", "FontCache", "WSearch", "stisvc", "WinDefend", "FontCache", "CDPSvc", "WdNisSvc", "tiledatamodelsvc", "lmhosts", "WdiSest", "TrkWks", "Schedule", "UserManager", "lfsvc", "gpsvc", "StorSvc", "SystemEventsBroker", "hidserv", "iphlpsvc", "LSM", "SysMain", "netprofm", "NcbService", "NlaSvc", "nsi", "SENS", "PlugPlay", "ShellHWDetection", "Power", "StateRepository", "PcaSvc", "RpcSs", "Spooler", "SessionEnv", "SSDPSRV", "wscsvc", "LanmanServer", "TermService", "UmRdpService", "WlanSvc", "WinHttpAutoProxySvc", "DcomLaunch", "DusmSvc", "KeyIso", "LanmanWorkstation", "QWAVE", "RpcEptMapper", "VaultSvc", "AppXSvc", "ClipSVC", "COMSysApp", "

## transform_nikto_db.go
package main

import (
	"encoding/csv"
	"fmt"
	"io"
	"io/ioutil"
	"os"
	"strconv"
	"strings"
	Set-GlobalSymbolResolver -DbgHelpPath 'C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\dbghelp.dll'

	function Process-RpcProcedure {
	param (
	[string]$Path
	)

	$dllHash = (Get-FileHash -Path $Path).Hash
	$rpcs = Get-RpcServer -Path $Path
	local smb = require "smb"
	local stdnse = require "stdnse"
	local string = require "string"

	description = [[
	Port of @zyn3rgy's webclientenum
	]]

	-- nmap --script=smb-webclientenum.nse --script-args=smbuser=<username>,smbpass=<password>,smbbasic=1,smbsign=force <host>
	#
	# TO-DO: set \|DESTINATIONURL\| below to be whatever you want e.g. www.google.com. Do not include "http(s)://" as a prefix. All matching requests will be sent to that url. Thanks @Meatballs__!
	#
	# Note this version requires Apache 2.4+
	#
	# Save this file into something like /etc/apache2/redirect.rules.
	# Then in your site's apache conf file (in /etc/apache2/sites-avaiable/), put this statement somewhere near the bottom
	#
	# Include /etc/apache2/redirect.rules
	#
	from pypsrp.exceptions import AuthenticationError
	from pypsrp.client import Client

	HOST = '10.0.128.100'
	MY_PASSWORD = 'abc123!!!'
	client = None


	def connect(username: str, password: str):
	global client
	import System.IO
	import Data.Dates
	import Data.List.Split

	data ShadowEntry = ShadowEntry {
	username :: String,
	hash :: String
	} deriving (Show)

	parseShadowEntryString :: String -> ShadowEntry
	tap "osx-cross/avr"
	tap "sidaf/pentest"
	tap "t94j0/security"
	tap "homebrew/core"
	tap "homebrew/bundle"
	tap "homebrew/services"
	tap "acrogenesis/macchanger"
	tap "caskroom/cask"
	cask "java"
	brew "afl-fuzz"
	package main

	import (
	"encoding/csv"
	"fmt"
	"io"
	"io/ioutil"
	"os"
	"strconv"
	"strings"