Skip to content

Instantly share code, notes, and snippets.

View wikijm's full-sized avatar

wikijm

112 followers · 131 following
View GitHub Profile
@wikijm
wikijm / customqueries.json
Created June 15, 2020 10:38 — forked from seajaysec/customqueries.json
bloodhound custom queries
{
"queries": [{
"name": "List all owned users",
"queryList": [{
"final": true,
"query": "MATCH (m:User) WHERE m.owned=TRUE RETURN m"
}]
},
{
"name": "List all owned computers",
@wikijm
wikijm / Get-AzureADPSPermissions.ps1
Created August 15, 2019 06:42 — forked from psignoret/Get-AzureADPSPermissions.ps1
Script to list all delegated permissions and application permissions in Azure AD
<#
.SYNOPSIS
Lists delegated permissions (OAuth2PermissionGrants) and application permissions (AppRoleAssignments).
.PARAMETER DelegatedPermissions
If set, will return delegated permissions. If neither this switch nor the ApplicationPermissions switch is set,
both application and delegated permissions will be returned.
.PARAMETER ApplicationPermissions
If set, will return application permissions. If neither this switch nor the DelegatedPermissions switch is set,
@wikijm
wikijm / wifi_kit_32_ntp_clock.log
Created August 13, 2019 11:24
Arduino: 1.8.9 (Windows 10), Board: "Heltec WiFi Kit 32, Disabled, Default, 240MHz (WiFi/BT), QIO, 40MHz, 4MB (32Mb), 115200, None"
C:\Program Files (x86)\Arduino\arduino-builder -dump-prefs -logger=machine -hardware C:\Program Files (x86)\Arduino\hardware -hardware C:\Users\WikiJM\AppData\Local\Arduino15\packages -tools C:\Program Files (x86)\Arduino\tools-builder -tools C:\Program Files (x86)\Arduino\hardware\tools\avr -tools C:\Users\WikiJM\AppData\Local\Arduino15\packages -built-in-libraries C:\Program Files (x86)\Arduino\libraries -libraries C:\Users\WikiJM\Documents\Arduino\libraries -fqbn=esp32:esp32:heltec_wifi_kit_32:PSRAM=disabled,PartitionScheme=default,CPUFreq=240,FlashMode=qio,FlashFreq=40,FlashSize=4M,UploadSpeed=115200,DebugLevel=none -ide-version=10809 -build-path C:\Users\WikiJM\AppData\Local\Temp\arduino_build_415512 -warnings=all -build-cache C:\Users\WikiJM\AppData\Local\Temp\arduino_cache_64111 -prefs=build.warn_data_percentage=75 -prefs=runtime.tools.xtensa-esp32-elf-gcc.path=C:\Users\W
@wikijm
wikijm / nosuchuser.html
Created July 15, 2019 17:31 — forked from mubix/nosuchuser.html
No Such User - Spam Deterrent
<html>
<head>
<style>
* {
font-family:Roboto, "Helvetica Neue", Helvetica, Arial, sans-serif;
}
</style>
</head>
<body>
<table cellpadding="0" cellspacing="0" class="email-wrapper" style="padding-top:32px;background-color:#ffffff;"><tbody>
@wikijm
wikijm / ConvertFrom-EventLogRecord.ps1
Created November 11, 2018 21:46 — forked from IISResetMe/ConvertFrom-EventLogRecord.ps1
Convert EventData fields from windows event log records to objects
function ConvertFrom-EventLogRecord
{
param(
[Parameter(Mandatory=$true,ValueFromPipeline=$true)]
[System.Diagnostics.Eventing.Reader.EventLogRecord[]]
$InputEvent,
[Parameter(Mandatory=$true,Position=1)]
[ValidateNotNullOrEmpty()]
[string[]]
@wikijm
wikijm / keybase.md
Created April 1, 2018 21:54

Keybase proof

I hereby claim:

  • I am wikijm on github.
  • I am wikijm (https://keybase.io/wikijm) on keybase.
  • I have a public key whose fingerprint is 48F6 0591 CC59 4DCF 9F5E B079 9E5C B6AC 0F10 E3EC

To claim this, I am signing this object:

@wikijm
wikijm / script.ps1
Created February 2, 2018 22:14
Hooking MessageBox For No-Prompt Trusted Root Certificate Install
#Verify Not Present
( Get-ChildItem Cert:\CurrentUser\Root | Where-Object {$_.Subject -match "__Interceptor_Trusted_Root" })
#Import-Certificate
( Get-ChildItem -Path C:\Test\thing.cer ) | Import-Certificate -CertStoreLocation cert:\CurrentUser\Root
#Prompted
Remove-Item -Path cert:\CurrentUser\Root\5C205339AE9FA846FA99D3FFF0CDEE65EB8D8E99
@wikijm
wikijm / chocolatey.repository.build
Last active November 3, 2017 21:10 — forked from dragon788/chocolatey.repository.build
Setup Chocolatey.Server simply and easily by getting and configuring the IIS requirements (for IIS7.5 and higher) and replacing the default site.
# Boxstarter options
$Boxstarter.RebootOk=$true # Allow reboots?
$Boxstarter.NoPassword=$false # Is this a machine with no login password?
$Boxstarter.AutoLogin=$true # Save my password securely and auto-login after a reboot
# Unrestricted is only good for testing, don't use that in production
Update-ExecutionPolicy RemoteSigned
Disable-InternetExplorerESC
Disable-UAC
#Enable-RemoteDesktop
Set-WindowsExplorerOptions -EnableShowHiddenFilesFoldersDrives -EnableShowProtectedOSFiles
@wikijm
wikijm / oauthServer.go
Created August 9, 2017 06:41 — forked from staaldraad/oauthServer.go
A mini OAuth server for Azure
package main
import (
"crypto/tls"
"fmt"
"io/ioutil"
"net/http"
"net/url"
"strings"
)
@wikijm
wikijm / Sdclt.ps1
Created June 26, 2017 05:59 — forked from netbiosX/Sdclt.ps1
Bypass UAC via sdclt in Windows 10 systems
<#
.SYNOPSIS
This script can bypass User Access Control (UAC) via sdclt.exe for Windows 10.
Author: @netbiosX
License: BSD 3-Clause
Required Dependencies: None
Optional Dependencies: None
　
It creates a registry key in: "HKCU:\Software\Microsoft\Windows\CurrentVersion\App Paths\control.exe" to perform UAC bypass