Ben Campbell Meatballs1

Meatballs1 / .htaccess

Last active August 16, 2024 03:09 — forked from curi0usJack/.htaccess

Drop into your apache working directory to instantly redirect most AV crap elsewhere.

	Define REDIR_TARGET example.com

	RewriteEngine On
	RewriteOptions Inherit

	# Uncomment the below line for verbose logging, including seeing which rule matched.
	#LogLevel alert rewrite:trace5

	# BURN AV BURN

Meatballs1 / PELoader.cs

Last active October 3, 2022 17:48

Reflective PE Injection Mimikatz - Via InstallUtil.exe

	using System;
	using System.IO;
	using System.Text;
	using System.Collections.Generic;
	using System.Configuration.Install;
	using System.Runtime.InteropServices;



	/*

Meatballs1 / drop_binary.bat

Last active August 29, 2015 14:26 — forked from mattifestation/drop_binary.bat

Drop binary data from the command line w/o needing PowerShell

	echo -----BEGIN CERTIFICATE----- > encoded.txt
	echo Just Base64 encode your binary data
	echo TVoAAA== >> encoded.txt
	echo -----END CERTIFICATE----- >> encoded.txt
	certutil -decode encoded.txt decoded.bin

Meatballs1 / InstallUtil-PowerShell.cs

Last active October 13, 2023 14:47

InstallUtil.exe PowerShell

	using System;
	using System.Diagnostics;
	using System.Reflection;
	using System.Configuration.Install;
	using System.Runtime.InteropServices;

	//Add For PowerShell Invocation
	using System.Collections.ObjectModel;
	using System.Management.Automation;
	using System.Management.Automation.Runspaces;

Meatballs1 / pshell.cs

Last active September 11, 2018 15:00

Invoke Interactive PowerShell and Run Local Scripts Inside InstallUtil

	using System;
	using System.IO;
	using System.Diagnostics;
	using System.Reflection;
	using System.Configuration.Install;
	using System.Runtime.InteropServices;

	//Add For PowerShell Invocation
	using System.Collections.ObjectModel;
	using System.Management.Automation;

Meatballs1 / Win10Bypass.cs

Last active August 29, 2015 14:26

Windows 10 Prototype Bypass Applocker

	using System;
	using System.Diagnostics;
	using System.Reflection;
	using System.Configuration.Install;
	using System.Runtime.InteropServices;

	/*
	Author: Casey Smith, Twitter: @subTee
	License: BSD 3-Clause
	Step One:

Meatballs1 / gist:e1ca08e5e56f6243db0e

Created August 26, 2014 09:48 — forked from JosephPecoraro/shell-execution.rb

	# Ways to execute a shell script in Ruby
	# Example Script - Joseph Pecoraro

	cmd = "echo 'hi'" # Sample string that can be used

	# 1. Kernel#` - commonly called backticks - `cmd`
	# This is like many other languages, including bash, PHP, and Perl
	# Returns the result of the shell command
	# Docs: http://ruby-doc.org/core/classes/Kernel.html#M001111