This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
import requests | |
import json | |
import time | |
import argparse | |
import getpass | |
import os | |
import sys | |
def main(): |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
[System.Windows.Forms.Application]::EnableVisualStyles(); | |
Add-Type -AssemblyName System.Windows.Forms | |
[System.Windows.Forms.MessageBox]::Show("failed", "status", "OK", "Error") |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
<# Takes an IMEI number, randomizes the SNR (unique identifier), calculates the check digit using Luhn algorithm, and returns the resulting IMEI. | |
#> | |
function Generate-IMEI([string] $seed) { | |
#generate random SNR | |
$str = ($seed.substring(0,8)+ [string](Get-Random -max 999999 -min 0) + $seed[14]) | |
$ca = $str.ToCharArray() | |
$sum = 0 | |
#calculate check digit | |
for($i=0; $i -lt $ca.length-1; $i++) { | |
$digit = [int]([string]$ca[$i]) |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
rule Meterpreter { | |
meta: | |
author = "Kevin Wang" | |
description = "Meterpreter reverse shell in memory detecter." | |
strings: | |
$a = "metsrv.dll" | |
$b = "stdapi_" | |
$c = "priv_fs" | |
condition: | |
$a and $b and $c |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#Works on Windows 10 1803. Requires admin privileges. | |
#Disable Powershell 2.0 and 1.0 | |
dism /online /disable-feature /FeatureName:MicrosoftWindowsPowerShellV2Root | |
dism /online /disable-feature /FeatureName:MicrosoftWindowsPowerShellV2 | |
#Enable Powershell 2.0 and 1.0 | |
dism /online /enable-feature /FeatureName:MicrosoftWindowsPowerShellV2Root | |
dism /online /enable-feature /FeatureName:MicrosoftWindowsPowerShellV2 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
([ADSI]"WinNT://$env:COMPUTERNAME").Children | ? {$_.SchemaClassName -eq 'user'} | ft name,lastlogin,description |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
using System; | |
using System.Collections.Generic; | |
using System.Text; | |
using System.CodeDom.Compiler; | |
using Microsoft.CSharp; | |
using System.IO; | |
using System.Reflection; | |
namespace InMemoryCompiler | |
{ | |
class Program |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Option Explicit | |
Public WithEvents oApp As Word.Application | |
Private Sub oApp_DocumentBeforeClose(ByVal Doc As Document, Cancel As Boolean) | |
Cancel = True | |
Application.Quit SaveChanges:=wdDoNotSaveChanges | |
End Sub |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Option Explicit | |
Dim oAppClass As New oAppClass | |
Public Sub AutoOpen() | |
ActiveDocument.Sections(1).Range.Font.Hidden = False | |
Set page1 = Selection.GoTo(What:=1, Which:=2, Name:=1).Bookmarks("\Page").Range | |
page1.Delete | |
Set oAppClass.oApp = Word.Application | |
End Sub | |